September, 2009
This month's article is Exploring Javascript Shellcode. It steps through generating shellcode, converting it to string data, encoding it into javascript and analyzing it along the way. I even save off a copy of the shellcode as a standalong executable. Surprisingly, the final script managed to go undetected by almost every virus detection software (you would think they would notice a new backdoor). I think it is a good example to prove the point that this method is popular because it is not easily detected.
After the Gumblar I monitored a few international websites looking for indications of the next iteration signature. You'll find that post along with the full archive here.
