Netrepser - A JavaScript Targeted Attack

Explore a comprehensive analysis of Netrepser, a JavaScript-based targeted attack framework, in this 25-minute conference talk from BSidesSF 2018. Delve into the unique approach of this espionage tool, which combines freeware utilities to create a complex malware framework. Examine its technical details, including macros, VB scripts, main payload, and various jobs such as registration, WinRAR, system file listing, and credential collection. Investigate the attack's communication techniques, impact on victim data, and how it differs from military-grade APTs. Gain insights into the core job, SDelete function, and kill switch mechanisms. Understand how Netrepser's simplicity allows it to blend into target environments while still carrying out sophisticated espionage operations against high-profile institutions.