Yara Rule for Safari window.parent.close()

Posted: May 8th, 2010 | Author: | Filed under: IT Related | Tags: , , , , , | 1 Comment »
rule SafariWindowParentClose
{
   meta:
      ref = "Safari window.parent.close()"
      impact = 7
   strings:
      $SafariWindowParentClose_1 = /.*?.prompt\(alert\)/
      $SafariWindowParentClose_2 = /.*?.prompt\(.*?\)/
      $SafariWindowParentClose_3 = /.*?.close\(\)/
   condition:
      all of them
}

One Comment on “Yara Rule for Safari window.parent.close()”

  1. 1 Tweets that mention Yara (and JSUNPACK) Rule for Safari window.parent.close() -- Topsy.com said at 7:31 PM on May 8th, 2010:

    […] This post was mentioned on Twitter by alex knorr, Joxean Koret, Joxean Koret, Rubén Santamarta, Matthew de Carteret and others. Matthew de Carteret said: RT @xanda: Yara (and JSUNPACK) Rule for Safari window.parent.close() http://goo.gl/hYIu < nice! new 0day coming? 😛 […]


Leave a Reply