search

svent / jsdetox

A Javascript malware analysis tool
https://svent.dev/projects/jsdetox/
592 stars 77 forks source link

Simple script cannot be analyzed #1

Closed invernizzi closed 12 years ago

invernizzi commented 12 years ago

Hello, first of all, very cool project. This is a simple script, working in my browser:

    <html>
        <body>
            <script>
                var a='aler'+'t ("ciao");';
                eval(a);
            </script>
        </body>
    </html>

Js-detox correctly identifies the script, and is able to run it and intercept the eval correctly. However, clicking the "Analyze" javascript button a failure is reported: The JS cannot be parsed.

Hoping this helps you, rock on.

jsdetox commit #: 4b79cd6648d1119b5887d809219ec2210b13fda1

svent commented 12 years ago

Thanks for reporting this! I found a bug in the string optimizer with your sample, I will commit the fix shortly.