3 ms·
Very nice work! Best breakdown of the magecart code I've seen by far. edit: One of the clever things they do is have a different response for the GET and POST
by strictnein 8y ago
Very nice work! Best breakdown of the magecart code I've seen by far.
edit:
One of the clever things they do is have a different response for the GET and POST on what looks to be a JS file:
> hxxps://webfotce.me/js/form.js
Like with the new one( hxxps://info-stat.ws/js/slider.js ) if you do a GET you just get some innocuous looking JS:
jQuery.noConflict();
But the malicious JS posts to that URL as well.