infosec » blog.l-lacker.com

Security | Malware Analysis | What to do when JavaScript is obsfucated.

Feb 142012

The embedded video is a result of working with a colleague of mine to de-obfuscate some javascript found in a live sample that essentially started as a piece of spam. His write-up is phenomenal regarding the subject, and I will simply embed the video I recorded out of context. To put it in context be sure to check out the article here: http://www.h-i-r.net/2011/12/intro-to-javascript-malware-analysis.html

Edit: Looks like Infosecisland also picked this up, be sure to check it out here: http://www.infosecisland.com/videos-view/19101-Malware-Analysis-How-to-Decode-JavaScript-Obfuscation.html

Security | Backtrack 5 on a Galaxy S Phone

Android, backtrack, Root, Security No Responses »

May 122011

I just finished a Backtrack 5 install on my Samsung Galaxy S phone. I will detail out the steps to get it running most Android phones. While this method was ONLY testing on my Galaxy S (Vibrant) but should work with other devices.

Security | Android – What other information are you leaking?

Android, Root, Security No Responses »

Sep 232010

After reading Cory’s post about Rooted Android device + Accounts.db = passwords stored in clear text, it got me thinking. What else could I find. There are multiple databases in the Android OS, ranging from chat history to password storage. Lets see what they give up.

Security | Cyber-RAID + Security B-sides IN KC!!!!

Security No Responses »

Aug 052010

September is less than 30 days away and already shaping up to be one of the most exciting months from an InfoSec perspective that I’ve have signed up to participate in. This industry (artform) has been nothing short of amazing to be involved with. Sitting in a cube and reading about most of these things, vs going out and getting involved should be a huge learning opportunity. If you are within driving distance of Kansas City and are remotely interesting in information security , consider coming to these events!