pop-ups are already very annoying, but pop-unders are worse. They usually stay in the background until a user closes all other windows, which is great for terrible ads and even better for things like coinhive.
I have reverse engineered several tricks used by a pop-under library and reported the bugs to Chrome. After several months without a working pop-under technique, the library was updated with a new trick and it's working on Widows, Linux and Mac from the current version of Chrome up to the development version 68.
While reporting the issues to Chrome is nice, I also create videos explaining the process and tools I use when analysing and working with obfuscated JavaScript.
So here is the latest video:
Custom Chromium Build to Reverse Engineer Pop-Under Trick (15min): https://www.youtube.com/watch?v=y6Uzinz3DRU
Chromium Issue 833148: https://bugs.chromium.org/p/chromium/issues/detail?id=833148
If this was interesting for you, here are the previous videos on the topic - each one shows some other tricks/tools used:
Reverse engineering obfuscated JavaScript - PopUnder Chrome 59: https://www.youtube.com/edit?o=U&video_id=8UqHCrGdxOM
Reverse engineering PopUnder trick for Chrome 60: https://www.youtube.com/watch?v=PPzRcZLNCPY
[Live] Reverse Engineering new PopUnder for Chrome 63 on Windows (very long/boring livestream): https://www.youtube.com/watch?v=VcFQeimLH1c
Thanks for checking out the videos!
No comments yet.
