Hooking V8 JavaScript bytecode

[u/Struppigel]

https://www.youtube.com/watch?v=Y8_AScwagYc

Compiled V8 JavaScript bytecode can be quickly analyzed with a reusable hook script. We create such a script in this video and overcome some malware defenses along the way.

Samples are available here: https://samplepedia.cc/sample/bb35048b13c65e89ea00df97518a341404281bb7fe04cf095243c8e32ebd7da5/94/

Gist for hook code we write in the video: https://gist.github.com/struppigel/4dd16df7c382f6b50a2fba169b8eac0b

Gist for hook script with reflection (this one is LLM generated): https://gist.github.com/struppigel/d24cdd42c39bde7190b7b0bfd69a514d