A forum for reverse engineering, OS internals and malware analysis 

Search found 101 matches

 Go to advanced search

Re: Stubborn JavaScript in PDF

 by sysopfb ¦  Thu Oct 23, 2014 1:46 am ¦  Forum: Reverse Engineering and Debugging ¦  Topic: Stubborn JavaScript in PDF ¦  Replies: 4 ¦  Views: 7746

The one I deobfuscated was two parts. So you have that huge image file which is part of the CVE (CVE-2013-2729 if I remember right) and then I had two separate javascript sections using two XFA nodes. The XFA nodes hold the data that the js works on so you have to manipulate the js a bit if you want...

  • 1
  • 7
  • 8
  • 9
  • 10
  • 11