 CudniLa Merma - VigiladoPremium,MVM
join:2003-12-20
Someshire
kudos:13 | Spotting malicious JavaScript in a page from
»research.zscaler.com/2012/05/spo···age.html
"..
In this post, I'll illustrate some of the places more commonly used to hide code and just how to spot them.
.."
in case you are playing 
Cudni
--
"what we know we know the same, what we don't know, we don't know it differently."
Help yourself so God can help you.
Microsoft MVP, 2006 - 2012/13 |
 therube
join:2004-11-11
Randallstown, MD | > Most malicious JavaScript is pulled from a different domain other than the hijacked page
NoScript, even if you were to Allow JavaScript on the source page, continues to block JavaScript on any other pages not specifically allowed, IOW that "different domain".
> Another good clue is the location of the script tag on the page
True, but again so long as the malicious code is hosted on a different domain, it is immaterial to NoScript users.
(Though if you were out looking for code, yes there are more typical places to find it in the page code.) |
