Web attacks using obfuscated script

1. Web Attacks using
Obfuscated JavaScript
Amol Kamble

2. “ Code obfuscation is the practice of
making code unintelligible , or at the
very least, hard to understand ”
“General code obfuscation techniques
aim to confuse the understanding of
the way in which program functions.”

3. Who use the Code Obfuscation?
code obfuscation is used to protect
intellectual property by software
companies.
it is also used extensively by authors
of malicious code to avoid detection
from virus scanner.

4. Different Obfuscation Techniques

5. Different Obfuscation Techniques
Randomization Obfuscation
Data Obfuscation
Encoding Obfuscation
Logic Structure Obfuscation

6. Obfuscation Examples
obfuscate a loop

7. Obfuscation Examples

8. Use of Script In Web

9. Use of Scripts In Web
Information Validation
Event Handling
Changing Web Content
Dynamically
Business Logic Implementation

10. Use of Scripts by the Web
Attacker

11. Use of Scripts by the Web
Attacker
Information Loss
Download Malicious Code
Redirect to Another Malicious
Website
Doing something Behalf of User
Calling Native Function

12. How antivirus software works

13. How antivirus software works
Signature-based detection
Behavioral detection
String pattern Matching
Emulator or Virual Browser

14. How antivirus Deal with
Malicious Obfuscated Script

15. How antivirus Deal with
Malicious Obfuscated Script
Deobfuscate the Script and
Check for virus Signature
Don’t Allowed any Obfuscated
Script

16. How antivirus Deal with
Malicious Obfuscated Script
Run Script in Virtual Browser and
Check Script Behaviour
Deobfusated the Script and
Check Semantics of Instrution in
Script

17. Thank you!!!