pop-ups are already very annoying, but pop-unders are worse. They usually stay in the background until a user closes all other windows, which is great for terrible ads and even better for things like coinhive.

I have reverse engineered several tricks used by a pop-under library and reported the bugs to Chrome. After several months without a working pop-under technique, the library was updated with a new trick and it's working on Widows, Linux and Mac from the current version of Chrome up to the development version 68.

While reporting the issues to Chrome is nice, I also create videos explaining the process and tools I use when analysing and working with obfuscated JavaScript.

So here is the latest video:

Custom Chromium Build to Reverse Engineer Pop-Under Trick (15min): https://www.youtube.com/watch?v=y6Uzinz3DRU

Chromium Issue 833148: https://bugs.chromium.org/p/chromium/issues/detail?id=833148

If this was interesting for you, here are the previous videos on the topic - each one shows some other tricks/tools used:

Reverse engineering obfuscated JavaScript - PopUnder Chrome 59: https://www.youtube.com/edit?o=U&video_id=8UqHCrGdxOM

Reverse engineering PopUnder trick for Chrome 60: https://www.youtube.com/watch?v=PPzRcZLNCPY

[Live] Reverse Engineering new PopUnder for Chrome 63 on Windows (very long/boring livestream): https://www.youtube.com/watch?v=VcFQeimLH1c

Thanks for checking out the videos!