Yara Rule for Safari window.parent.close()
May
08
rule SafariWindowParentClose { meta: ref = "Safari window.parent.close()" impact = 7 strings: $SafariWindowParentClose_1 = /.*?.prompt\(alert\)/ $SafariWindowParentClose_2 = /.*?.prompt\(.*?\)/ $SafariWindowParentClose_3 = /.*?.close\(\)/ condition: all of them } |
Pingback: Tweets that mention Yara (and JSUNPACK) Rule for Safari window.parent.close() -- Topsy.com