Inspect a local Electron/JavaScript directory or ASAR without executing its code. analyze_javascript_application and the CLI routes below return an Evidence record with the application graph, static ...
Static analysis of a PDF email attachment using pdfid and pdf-parser to identify JavaScript, inspect OpenAction entries, and ...
What runs on the screens of websites and web services is JavaScript inside the viewer's browser. However, during the development phase of those pages, "Node.js," which runs outside the browser, is ...
A PDF that arrives from outside the building is, as far as the parser is concerned, a program some stranger wrote. Inside ...
I tested REA, GitHub's viral reverse engineering tool, on a 100 MB Electron app. Here's where its static analysis impressed and where it failed.