Author Topic: JSUNPACK  (Read 16042 times)

0 Members and 1 Guest are viewing this topic.

March 31, 2012, 10:41:54 am
Read 16042 times

GaryDee

  • Sr. Member

  • Offline
  • ****

  • 248
Hi. Does anyone know if JSUNPACK ist having some problems at the moment ? Thx

http://jsunpack.jeek.org/?list=1

March 31, 2012, 01:02:36 pm
Reply #1

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
I don't see a problem. What's wrong ?
Ruining the bad guy's day

March 31, 2012, 02:46:09 pm
Reply #2

GaryDee

  • Sr. Member

  • Offline
  • ****

  • 248
I don't see a problem. What's wrong ?

Take a look at the screenshots i made just a few minutes ago. On the right List Recent Malicious URLs and uploads it looks like that since yesterday evening, although i already uploaded some suspicious scripts, but it does not show them as suspicious. Also whatever Page i open there is no suspicous upload (or URL) anymore shown.

March 31, 2012, 02:46:48 pm
Reply #3

GaryDee

  • Sr. Member

  • Offline
  • ****

  • 248
Forgot the 3rd one


March 31, 2012, 03:06:36 pm
Reply #4

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
I sent Blake a message.
Ruining the bad guy's day

April 01, 2012, 04:31:20 pm
Reply #5

GaryDee

  • Sr. Member

  • Offline
  • ****

  • 248
Thx. I guess it seems to look like a abuse/attack or so. Did he reply ?

April 01, 2012, 04:38:50 pm
Reply #6

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Not yet.
Ruining the bad guy's day

April 02, 2012, 09:45:07 pm
Reply #7

dlipman

  • Special Access
  • Full Member

  • Offline
  • *

  • 60
    • Multi-AV Scanning Tool
JSunpack crashed with Python errors for me this morning.

BTW:  The last communique I had with Blake, I had him allow a user entered field so we can use our own referral address and override the default address.
This should be helpful for Backhole Exploits.

April 04, 2012, 05:47:58 pm
Reply #8

Amishrabbit

  • Jr. Member

  • Offline
  • **

  • 10
I sent Blake a message.

Thank you.

If, or when, he replies, could you also let him know his SVN download is broken for some reason, so it's not possible to retrieve the source of jsunpack-n at the moment.

EDIT: svn/  trunk/ depends/ js-1.8.0-rc1-src.tar.gz is corrupted or has been deleted from the repository, as well. It shows as 0 bytes.

-=A
-=A

April 04, 2012, 06:04:24 pm
Reply #9

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
I don't see a problem. What's wrong ?

Take a look at the screenshots i made just a few minutes ago. On the right List Recent Malicious URLs and uploads it looks like that since yesterday evening, although i already uploaded some suspicious scripts, but it does not show them as suspicious. Also whatever Page i open there is no suspicous upload (or URL) anymore shown.


Blake replied that he was altering some of the suspicious detections a few days ago.
So it's not a bug.
Ruining the bad guy's day

April 04, 2012, 06:05:37 pm
Reply #10

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335

If, or when, he replies, could you also let him know his SVN download is broken for some reason, so it's not possible to retrieve the source of jsunpack-n at the moment.

EDIT: svn/  trunk/ depends/ js-1.8.0-rc1-src.tar.gz is corrupted or has been deleted from the repository, as well. It shows as 0 bytes.

Reported to Blake.
Ruining the bad guy's day

April 06, 2012, 10:35:30 am
Reply #11

GaryDee

  • Sr. Member

  • Offline
  • ****

  • 248
I guess (as far as i remember) i was online at JSUNPACK at the moment when it happened, and i remember clearly, that after refreshing several times the page, all the colours (red, orange, in the right list changed to black for several moments) after that they changed color back again, intorose and yellow. And something else i noticed, that in the left list there were several dozens of links from
Code: [Select]
phichit.net (see in the 3rd Screenshot above)

April 09, 2012, 02:31:09 pm
Reply #12

blake2

  • Newbie

  • Offline
  • *

  • 1
I guess (as far as i remember) i was online at JSUNPACK at the moment when it happened, and i remember clearly, that after refreshing several times the page, all the colours (red, orange, in the right list changed to black for several moments) after that they changed color back again, intorose and yellow.

I was modifying the color scheme recently so that would explain this behavior. If you have any other concerns let me know and I can try to address them.
Blake