[rkhunter]

Guys, could anybody recommend tool for JS debug?
For example, I have obfuscated code, that involves BlackHole and I want to understand what it doing.
Obfuscated code with http-header in attach (was extracted with very useful tool - Fiddler).

Thnx.

[a_d_13]

Hello,

You can use Firebug in Firefox, or Chrome's Dev Tools (Right Click --> "Inspect Element", go to "scripts" tab). It will let you set breakpoints, trace, and step. Also maybe useful:

http://jsunpack.jeek.org/
http://malzilla.sourceforge.net/

Thanks,
--AD

[EP_X0FF]

Opera Dragonfly can debug too.

http://www.opera.com/dragonfly/
http://www.youtube.com/watch?v=BeTzJ-HGLo4

[loreliaxy]

How do I run a debug program? I have Windows 2000 and lately, I keep getting the little debug box popping up asking if I want to debug. Of course, if I say yes, I get the bigger debug box and honestly, have absolutely NO CLUE as to how to proceed. Can anyone help or maybe provide me a link that I can basically walk myself thru on? Thanks!

[swirl]

debugging or just unpack it ? for blackhole I'd just change the last eval() into a document.write() (like you'd do in malzilla) and enjoy the unpacked script.
You might want to pass it through a code beautifier (http://jsbeautifier.org/) to read it smoothly.

EDIT: I just saw this thread is 2 months old XD