Malicious code will use a variety of methods to hamper attempts at reverse engineering them. Obfuscation is common, but other methods include purposefully crashing the application that you’re using to inspect the code. One of the first things that is … Continue reading
Loading malicious Javascript from a “benign” file isn’t a new thing, but using a Font file is. Spotted a WOFF file with a malicious payload in the wild. As we’ve seen before when using a PNG, the file is requested … Continue reading
For the past month or two I’ve been seeing this digital skimmer that I’ve started to call “checkcheck”, based on a function name in the code. It has a number of interesting features.
It may be easiest to just let Wikipedia explain the background of the Nihilist Cipher: In the history of cryptography, the Nihilist cipher is a manually operated symmetric encryption cipher originally used by Russian Nihilists in the 1880s to organize … Continue reading
AMSCO is an incomplete columnar transposition cipher. A bit to unpack there, but basically that means that you’re putting the message into columns and those columns may not have equal lengths. It was invented by an A.M. Scott in the … Continue reading
A couple of months ago the NSA’s Facebook and Twitter accounts posted this image, alongside the message “Can you crack the code? Check back Thursday for your next clue”:
Just a nice little Javascript tip that I came by awhile ago on Stackoverflow. If you have an array of strings and you want to convert it to an array of numbers the way you would commonly see that done … Continue reading
I was doing some work on a custom CMS recently. It’s been utilizing the really nice jQuery ColorBox plugin, and I was using it to preview a page with the following code: jQuery(‘#previewPage’).click(function() { var data = jQuery(‘#editpage’).serializeArray(); jQuery.colorbox({href:”/pages/preview/”, data: … Continue reading
It’s a long-standing tradition among programming languages to make dealing with dates as horrific as possible. Sure, that may be a bit of an exaggeration but looking at how Java, Javascript, PHP, C#, etc choose to handle dates and time can … Continue reading
I forget where I first saw this, but I’m using it frequently these days, so I thought I would post it up and maybe save someone some time in the future: Date.prototype.toYMD = function() { var year, month, day; year … Continue reading