How to catch malicious js on a website

V

Vladimir Taratushka2011-12-23 03:56:15

Malware

Vladimir Taratushka, 2011-12-23 03:56:15

There is a site on wp, a bunch of js libraries, at a certain moment a pop-up window with different urls began to pop up on a mouse click event.

I deflated the site, I did not find a single link that popped up, even with a partial entry.

How can I track in the debug mode what is called when clicked?

Ps knowledge in js - 0

Reply

Answer the question

In order to leave comments, you need to log in

9 answer(s)

A

Anatoly, 2011-12-23
@taliban

Give the link, a couple of people will come in, maybe someone will tell you

A

Andrey Burov, 2011-12-23
@BuriK666

If there is no knowledge, contact someone who has. for example on free-lance.ru

S

sankir, 2011-12-23
@sankir

You can download pure WP, and compare the files by content to start with.
Well, then, if there is no knowledge in JS, by typing, “bite out” those pieces of code that differ from the standard and see what happened.

R

Ruslan_Y, 2011-12-23
@Ruslan_Y

In addition to the previous comment, if you have access to visit statistics from server logs (awstats logs, for example) and so on, look for abnormally large access to "strange" files on the hosting, you may find a remote control script somewhere in subfolders.

W

WildZero, 2011-12-23
@WildZero

In wordpress, I often met that everything “left” is in the template and encoded in base64. Take a look this way.

A

Alexander, 2011-12-23
@zlobin

in mozilla you can put no scripr they can disable scripts one by one and you can figure out the bastard

U

Ura78, 2011-12-23
@Ura78

Try using online scanners first

K

KOLANICH, 2011-12-24
@KOLANICH

You can try siteguard.
Or you can write a simple script that monitors all changes in static pages and sends greetings to the soap.