zlacker

[return to "Please disable JavaScript to view this site"]
1. usr110+34[view] [source] 2020-11-28 21:07:15
>>abused+(OP)
So running untrusted code on your computer is a bad thing. Well, it should be in a sandbox, but that has many intentional and proably some less intentional holes to do stuff on your machine.

So how do I trace what Javascript is doing on my machine?

Generally mitmproxy gives a feeling what sites the browser talks too. And strace gives often a good feeling what a Linux binary does. But the browser is too big and complicated to read strace output in most cases.

Can anybody recommend a tool to look what Javascript code loaded by a certain page is doing?

◧◩
2. krapp+L4[view] [source] 2020-11-28 21:12:44
>>usr110+34
>Can anybody recommend a tool to look what Javascript code loaded by a certain page is doing?

Almost all modern browsers have debug panels that will list all of the requests made by a page, assets cached, cookies and local db, and of course it's trivial to just view the source of a site and read the javascript if it isn't compressed.

◧◩◪
3. usr110+B5[view] [source] 2020-11-28 21:20:15
>>krapp+L4
Yes, I am aware of dev tools. I use them to look at network requests or to "steal" my own credentials for curl usage.

Haven't really used the Javascript debugger, but my guess would be completely infeasible to follow everything a random "modern" Web site might do. And as you say some Javascript might be compressed or obfuscated. What I really would want is a somewhat higher level / more filtered approach: Like strace lets me just trace file operations for example.

[go to top]