« previous next »
Pages: [1]   Go Down

Author Topic: What is http_inspect: MULTIPLE ENCODINGS WITHIN JAVASCRIPT OBFUSCATED DATA  (Read 3142 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33950
  • malware fighter
What is http_inspect: MULTIPLE ENCODINGS WITHIN JAVASCRIPT OBFUSCATED DATA
« on: November 07, 2013, 06:23:09 PM »
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33950
  • malware fighter
Re: What is http_inspect: MULTIPLE ENCODINGS WITHIN JAVASCRIPT OBFUSCATED DATA
« Reply #1 on: November 07, 2013, 09:07:22 PM »
For the Snort SID -> http://www.snort.org/search/sid/120-11
Utility class for all HTML drawing classes-> <html> <head> <script type="text/javascript"> window.location="index.jhtml"; </script> </head> </html>

IP listed here: bl.spamcannibal.org

HTTP/1.1 301 Moved Permanently
Date: Thu, 07 Nov 2013 20:01:51 GMT
Server: Apache
Location: http://www./
Content-Length: 220
Connection: close
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="http://www./">here</a>.</p>
</body></html>

Site downloaded toolbar -> htxp://eula.mindspark.com/ask/uninstall/  Scam toolbar apps

See: http://www.mywot.com/en/scorecard/eula.mindspark.com?utm_source=addon&utm_content=rw-viewsc

polonus
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33950
  • malware fighter
Re: What is http_inspect: MULTIPLE ENCODINGS WITHIN JAVASCRIPT OBFUSCATED DATA
« Reply #2 on: November 07, 2013, 10:58:10 PM »
« Last Edit: November 07, 2013, 11:01:41 PM by polonus »
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!
Pages: [1]   Go Up
« previous next »