neonprimetime security , just trying to help

document.write("navigator.appName = " + navigator.appName + "<br/>") document.write("navigator.appCodeName =...

Saw this paste with malicious javascript . If ou strip out all the malicious variable creations (_zds, se, _dd) and the eval statement at th...

I saw today's blog by @malware_traffic on 2016-06-02 - EK DATA DUMP (ANGLER EK, KAIXIN EK, RIG EK) . In Brad's notes he listed 2 u...

Saw the following malicious email this week. The subject was "Internal Company Information Notice". The body of the email told t...

Saw this malicious obfuscated javascript and though it was worth a walk-thru. It starts as this ugly mess. (   function (olcdENyNGCBd) {...

Here's a walk-thru of how I look at a Phishing Email Attachment. There was a McAfee alert 'HTML/Phishing.b' on a file called ...

I wrote a post last year that told you Cross Site Scripting (XSS) is worse than you think . Well, here is another example of why that is tr...

I recently blogged about analyzing javascript in a PDF . I'd like to go full circle now and go back to an example of how to put javascr...

After analyzing a PDF and finding malicious javascript inside it (previous blog) , I wanted to make a rough attempt at steping through and t...

Let's say you have a PDF that you suspect is suspicious. Here's one way to analyze it. First download Python 2.7, then download the...