Use Babel to Deobfuscate JavaScript Malware

In this blob post, I will describe how I wrote a config extractor for obfuscated JavaScript-based GootLoader component. The hard part of automating the config extraction is the obfuscation: the C2 servers are just plain text in the last stage. All a href='https://github.com/larsborn/gootloader-babel-deobfuscator' code is on Github /a if you are just interested in that. # Intro A fellow [ ]