Chii Chinonzi JavaScript Obfuscator?
JavaScript Obfuscator yakagadzirirwa kutora kodhi yakachena, inoverengwa nevanhu uye kuishandura kuita chimwe chinhu chisinganyatsonzwisisiki, zvichiita kuti zviome kunzwisisa kana kuchinja-chinja. Maturusi aya anotumidza zita rezvinhu zvinoshanduka uye mabasa, kubvisa nzvimbo tsvene, kupatsanura marongerwo ekodhi, uye kushandisa matekiniki akadai sekupatsanura tambo, kupinza makodhi muhexadecimal, kana kupatsanura kuyerera kwedata. Kunyange zvazvo chinangwa chacho kazhinji chiri chekuchengetedza pfuma yepfungwa kana kuderedza saizi yefaira, kuomarara kunobuda kunopawo dziviriro yakakwana yeJavaScript malware. Ndosaka mapoka mazhinji ekuchengetedza achitendeukira kuJavaScript deobfuscator tools kuti vaongorore kodhi yakashandurwa uye vaone maitiro akavanzika.
Semuenzaniso, chimwe chinhu chiri nyore se:
Kune vagadziri vezvirongwa zvekutumira data kubva kumakambani (funga nezveSaaS inovakirwa pabrowser), JavaScript obfuscator chikamu che toolchain. Asi shanduko imwe chete iyi inoita kuti ive chifukidziro chakakwana che JavaScript malware.
Mashandisiro Anoita Varwisi Kusaziva Kuti Vavanze Malware eJavaScript
Varwi vanoshandisa maturusi eJavaScript obfuscator kuti vavanze malware akaiswa mumaraibhurari akavhurika, mapakeji eNpm, kana zvakananga muma browser scripts. Maitiro akajairika kuviga payloads mukati memabasa asina kujeka anotanga panguva yekumhanya pasi pemamiriro chaiwo.
Funga nezve npm package yakakanganisika. Pakutanga, zvese zvinoita sezviri pamutemo. Asi kuongorora kwakadzama kunoratidza JavaScript isina kujeka inotarisa tambo dzakanyorwa, ma URL ari kure, kana dynamic eval() mafoni:
Uku hakusi kudzvanya. Kuvharira. JavaScript malware inovanda pano, ichimirira kuburitsa ma token, kuisa phishing forms, kana kuwedzera mvumo mukati memaapp.
Njodzi Chaidzo muAppSec neSupply Chain
Software yemazuva ano pipelines dzakavakirwa pakodhi yechitatu. JavaScript malware inoiswa kuburikidza nemagwaro akavharika haisi nzvimbo yekuchengetedza chete; idambudziko rekutengesa. Kana malware yakavharika yangowanikwa muraibhurari yakagovaniswa, inopararira:
- Kupinda muCI builds kuburikidza package.json
- Kuisa mumabhanduru epamberi uchishandisa Webpack/Rollup
- Kuburitswa kuburikidza neCDNs kana majekiseni ekunyora
Semuenzaniso, chiitiko chechiitiko chakaratidza kuti vapambi vakashandisa sei kuvharidzira kuisa zvinhu mumapakeji anoshandiswa zvakanyanya. Vagadziri vemapurogiramu havawanzo ongorora kodhi yakavharwa zvakadzama, zvichiita kuti ive nzvimbo yakakwana yekuhwanda.
Njodzi yacho haisi yekufungidzira. Yatova mukodhi yako kana zvinhu zvaunotarisira zvisina kutariswa.
Kuona Kodhi Yakavhiringidzika neJavaScript Deobfuscator Tools
Kuti vabate njodzi dzakavanzwa, mapoka anoshandisa maturusi eJavaScript deobfuscator. Izvi zvinoongorora mapatani ekodhi akavharika, zvinotsanangura tambo, uye zvinoburitsa zviratidzo zvakaita se dynamic eval(), zvishwe zvisina kujeka, uye kuomarara kusingakoshi.
Ma deobfuscators anobatsira haangogadziri kodhi chete; anomiririra:
- Kushandiswa kwe basa, eval, uye setTimeout nemidziyo yekutakura yakavharidzirwa
- Matanho marefu eBase64 kana hexadecimal strings
- Kudzora-kuyerera kwemvura kana kubaya dead-code
Zvishandiso zvinozvigadzira zvega zvakaita se static analyzers kana AST parser zvinobatsira kuona mapatani aya. Ndiwo mutsetse wekutanga wekudzivirira pakuongorora zvinoenderana kana kusimbisa zvigadziriso zvepakeji.
Muenzaniso: batanidza kuongorora kwe deobfuscation mu pre-merge checks kudzivirira kubatanidza njodzi dzakavanzwa.
Kubatanidza Kuonekwa mu CI/CD Pipelines
Kuona zvinhu hakusi basa rinoitwa mushure mekuiswa kwedata. Kuongorora zvinhu zvisina kujeka kunofanira kuva chikamu che CI/CD pipeline. Shandisa GitHub Zviito, GitLab CI, kana Jenkins kuti utange kuskena pane imwe neimwe push kana kubatanidza.
Typical pipeline kuyerera:
Nekutevedzwa kwemutemo, unogona kuvhara zvinhu zvine kodhi ine njodzi yakavanzika. Sanganisa izvi ne SCA midziyo kuti uwane masaini anozivikanwa emalware mumapakeji e npm.
Usamirire zvinhu zvisingatarisirwi panguva yekumhanya. Ita kuti zvive kurambwa kwenguva yekuronga.
Mutengo Wakavanzika weKuvharidzirwa: Kurwisa JavaScript Malware neDeobfuscators
Zvishandiso zveJavaScript obfuscator zvine mashandisirwo akakodzera. Asi vanorwisa vanovimba nazvo kuti vavanze malware eJavaScript uye vashandise kuvimba nehurongwa hwemakombiyuta huri pachena. Njodzi chaiyo muAppSec haisi mune zvaunonyora chete, asi pane zvaunopinza. Nekuisa JavaScript deobfuscator scans uye static analysis mu CI/CD pipelines, ma dev teams anogona kuona njodzi nekukurumidza. Shandisa kodhi yakavanzika muzvinhu zvinoenderana nemaitiro ayo nekufungidzira, kunyanya kana zvisingatarisirwi.
Zvishandiso senge Xygeni dzakavakirwa kubatsira matimu eDevSecOps kuti aonekwe munjodzi dzekuvharika uye njodzi dzekutengesa muJavaScript ecosystems. pipeline uye ona zviri kuvanzwa mukodhi yako zvisati zvasvika pakugadzirwa.
Xygeni Zvinopfuura kungoongorora zviri nyore nekuongorora maitiro eJavaScript obfuscation, kuratidza malware angangoitika eJavaScript, uye kutevedzera maitiro ane njodzi mumapakeji ari musoftware yako. Inobatanidzwa zvakanaka mu CI/CD pipelines, zvichiita kuti hurumende ishande otomatiki pamusoro pemhando yekodhi uye kuchengetedzwa kwayo.
Ramba uchitya. Tarisa zvese. Uye yeuka: kana zvichiita sekunge zvisina musoro, zvingangoda kutariswazve.
