DEFCON 20: Owning Bad Guys {And Mafia} with Javascript Botnets
Why Information Security Stack Exchange recommends it
Security Stack Exchange users link it when explaining JavaScript injection, persistent script caching and the risks of untrusted free proxies.
Recommended by 2 people across 2 different months, 2014 to 2017.
What it is
A DEF CON 20 conference talk by Chema Alonso on turning a rogue "anonymous" proxy server into a JavaScript botnet that targets the people who use it, including criminals. It covers injecting scripts into traffic, poisoning cached JavaScript files so they persist across sessions, and spreading to other sites.
What people said
Recommends TMR_OS · 2014-11 · Information Security Stack Exchange · on “JavaScript Injection using Man in the Middle Attack”
I'm not sure enough, but you can a try a "Man In The Browser Attack" by altering java-script files to inject js payload. Check out this presentation from DEFCON : [this video]
Recommends CaffeineAddiction · 2017-03 · Information Security Stack Exchange · on “how free internet proxy works”
First and Foremost the "trick" you are using is an exploit of your ISP's poorly planned infrastructure. As such it is most likely just as illegal as joining your neighbors WiFi because they left the default password enabled. Why it works: Your ISP is only monitoring HTTP/HTTPS traffic either via a transparent proxy of there own, or deep packet inspection. For whatever reason, they are not monitoring (or more likely monitoring but not charging) for other forms of network traffic ie VoIP services. This means if you setup your device to tunnel its traffic through to an external proxy via sock5 or socks5 over ssh ... your packets will be logged as non-HTTP(s) traffic and thus you will not be cha
Cites user45848 · 2014-05 · Information Security Stack Exchange · on “How dangerous javascripts really are?”
I've watched this video, and what this guy says is that with javascript its easy to create a worm that steals your information also that javascript will continue to execute even tho you closed the tab of the infected site , on the other tabs. Even after closing the browser it will save itself in cache only to load itself next time you open the browser. Are javascripts really that dangerous? Is it worth using NoScript? [this video]
Cites Jake Cross · 2015-05 · Information Security Stack Exchange · on “How does JavaScript Injection work?”
I was watching a DefCon talk and the speaker was saying he was able to infect JavaScript cache files, once the user visited his website/server. From there he was able to load scripts from other sites and infect them for when the user visits later on. Does anyone know how this works? Talk PDF: [LINK] (See page 7) Talk Video: [this video] (See 32:45)
Cites satibel · 2017-04 · Information Security Stack Exchange · on “Where do people who publish "free proxies lists" get their proxies from?”
People who have a "free"* proxy service will give it to one of the lists, then in a few hours the other lists will have got the ip too because they copy eachother. *Don't trust the free name, most of them use your data for "research" and/or change the content of websites you visit (maliciously or just replacing ads with their own.). See : [this video]