Xanda's Blog !~!

Yara Rule for Safari window.parent.close()

May
08
 
rule SafariWindowParentClose
{
   meta:
      ref = "Safari window.parent.close()"
      impact = 7
   strings:
      $SafariWindowParentClose_1 = /.*?.prompt\(alert\)/
      $SafariWindowParentClose_2 = /.*?.prompt\(.*?\)/
      $SafariWindowParentClose_3 = /.*?.close\(\)/
   condition:
      all of them
}
IT Related , , , , , 1 Comment

One Response to Yara Rule for Safari window.parent.close()

  1. Pingback: Tweets that mention Yara (and JSUNPACK) Rule for Safari window.parent.close() -- Topsy.com

Leave a Reply

Your email address will not be published. Required fields are marked *