box-js
A utility for analyzing and studying malicious JavaScript by emulating a Windows JScript environment.
What is box-js?
box-js is an open-source tool for analyzing malicious JavaScript samples. It emulates a Windows JScript environment to safely execute suspicious scripts, logging their behavior, extracting payloads, and identifying indicators of compromise (IOCs) such as URLs contacted, files written, and shell commands run.
Security researchers, malware analysts, and incident responders who need to dissect JavaScript-based threats in a controlled environment.
It provides a safe, sandboxed emulation specifically tailored for Windows JScript malware, with detailed behavioral logging and integration capabilities for security workflows, making it a trusted tool in the malware analysis community.
Overview
A tool for studying JavaScript malware.
Use Cases
Best For
- Analyzing JavaScript droppers and downloaders in malware campaigns
- Extracting payloads and IOCs from suspicious email attachments
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.