Reverse Engineering Obfuscated JavaScript

In this video we figure out how to do a PopUnder in Chrome version 59, by using a trick. Hopefully Chrome fixes this, because I resent this kind of advertisement.

-=[ ❤️ Support ]=-

-=[ 🐕 Social ]=-

-=[ 📄 P.S. ]=-

All links with "*" are affiliate links.
LiveOverflow / Security Flag GmbH is part of the Amazon Affiliate Partner Programm.

#ReverseEngineering

[specki]

Great vid! But why are PDFs allowed to execute JavaScript code? This just seems like a huge no-no to me.

[ikbenwelthuis]

3:15 My technique would be to copy it, paste it on stackoverflow and ask if someone knows what it does.

[ruroruro]

Damn. I remember, that I had extremely weird Chromium PDF Viewer "Please wait..." pop-ups on certain web sites, that would quickly close. I was extremely freaked out by them, but now everything makes sense.

[cyancoyote]

After coming home from work, it's such a great feeling to just sit back with a cold beer and watch some reversing :D

[angelcaru]

Popunders: exist
Tiling window managers: *I don't have such weaknesses*

[celesteartley]

This video was awesome, I am a newbie to Js and code in general but not only did I learn a lot it was a cool idea no matter how nefarious it could be.

[dextergerig]

Wow, I remember seeing that Please wait... Loading PDF. Message on sites over the past few months and always wondered what it was for. Guess I have my answer from a completely unexpected source.

[brianchandler]

Enjoying vids like these and admire your thinking. I often learn some technique I never thought of trying. Keep'em up. :)

[rabbitdrink]

"please disable your ad blocker we promise not to bug you"

[tobiiboii]

Damn I wonder how much of just trying weird shit it took the original creator to make the bypass. I guess if the money is there they don't care how long it takes

[JBlongz]

This is not the video I was looking for, but it was extremely interesting. I had to watch the whole thing. Hate those pop unders, but see the value for marketing. thank you

[dabbopabblo]

This has to be the BEST coding related JavaScript video Ive seen on YouTube in awhile, omg!

[mychemicaljojo]

Really nice video! One of my tips when going through obfuscated code: they always eval. No matter what, most of the obfuscated code I’ve seen always converts some arbitrary data structure through arbitrary functions into a nice string that will then get eval’d. Try looking for that call and you’ll be able to alert whatever it is that goes through eval, and you’ll get clean source.

[patrick]

I just blogged about this very script 2 weeks ago! Glad we came to the same conclusion. I went a little further looking at the encoded data. Just mentioned you in a tweet with the link

[DavidGilbertson]

I think this is the funniest and most interesting JS video I've ever watched.

[romanemul]

very good. You should spend some time to develop some ad block chrome, mozilla plugin with your skills. But be careful evil lurks everywhere and reverse engineer hunting game is everywhere. Hope one day youll get some credit on reddit.

[omaryahia]

this is just amazing!
thank you so much I really like these adventures of reverse engineering

[LiEnby]

single handedly destroyed this guys carrier xD

[muko]

Thanks for this video! I've been wondering for ages what this weird PDF-Viewer message was all about. I kinda already suspected that it was some kind of scam, but I would not have guessed for it to be that elaborate.

[ccarniver]

I would never have figured this out in a million years, thanks