Hi there @kirk-sayre-work and @CapacitorSet ,
It looks like we are working on similar things and there is a potential for collaboration.
The Canadian Centre for Cyber Security has a malware analysis tool called Assemblyline that uses a plugin that I developed called JsJaws.
JsJaws integrates box.js as well another open-source project called Malware Jail which I have done some heavy development on to bring back to life. Both box.js and my modified version of Malware Jail perform emulation of JavaScript files using similar libraries (vm/vm2) and extract similar features like written files, network callouts, etc.
For the sake of avoiding duplication of effort, I think it would be worth our time to discuss how to merge my modified version of Malware Jail into box.js, since box.js is the more popular project. It's on my to-do list to perform this migration, but it will be a lot of work, and I would like to know your thoughts on this.
I believe by merging these two projects, it would be a fantastic for the cyber security community!
If you're interested or have any questions, feel free to reach out, the Assemblyline team has a Discord server for faster communications: https://discord.gg/GUAy9wErNu
Kevin 馃嚚馃嚘
Hi there @kirk-sayre-work and @CapacitorSet ,
It looks like we are working on similar things and there is a potential for collaboration.
The Canadian Centre for Cyber Security has a malware analysis tool called Assemblyline that uses a plugin that I developed called JsJaws.
JsJaws integrates box.js as well another open-source project called Malware Jail which I have done some heavy development on to bring back to life. Both box.js and my modified version of Malware Jail perform emulation of JavaScript files using similar libraries (vm/vm2) and extract similar features like written files, network callouts, etc.
For the sake of avoiding duplication of effort, I think it would be worth our time to discuss how to merge my modified version of Malware Jail into box.js, since box.js is the more popular project. It's on my to-do list to perform this migration, but it will be a lot of work, and I would like to know your thoughts on this.
I believe by merging these two projects, it would be a fantastic for the cyber security community!
If you're interested or have any questions, feel free to reach out, the Assemblyline team has a Discord server for faster communications: https://discord.gg/GUAy9wErNu
Kevin 馃嚚馃嚘