{"id":800,"date":"2014-09-17T19:11:14","date_gmt":"2014-09-17T19:11:14","guid":{"rendered":"https:\/\/yt.christiaan008.com\/?post_type=project&#038;p=800"},"modified":"2015-06-08T09:57:25","modified_gmt":"2015-06-08T08:57:25","slug":"owning-bad-guys-and-mafia-with-javascript-botnets","status":"publish","type":"project","link":"https:\/\/yt.christiaan008.com\/?project=owning-bad-guys-and-mafia-with-javascript-botnets","title":{"rendered":"Owning bad guys (and mafia) with JavaScript botnets"},"content":{"rendered":"<p>[et_pb_section fullwidth=&#8221;on&#8221; specialty=&#8221;off&#8221; transparent_background=&#8221;off&#8221; background_color=&#8221;#ffffff&#8221; inner_shadow=&#8221;off&#8221; parallax=&#8221;off&#8221; parallax_method=&#8221;off&#8221;][et_pb_fullwidth_slider admin_label=&#8221;Fullwidth Slider&#8221; show_arrows=&#8221;on&#8221; show_pagination=&#8221;on&#8221; auto=&#8221;off&#8221; parallax=&#8221;on&#8221; parallax_method=&#8221;off&#8221; module_id=&#8221;newtab&#8221;][et_pb_slide heading=&#8221;Owning bad guys (and mafia) with JavaScript botnets &#8221; background_image=&#8221;https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/03\/DEFCON_19_conference_room_dark.jpg&#8221; background_color=&#8221;#ffffff&#8221; alignment=&#8221;center&#8221; background_layout=&#8221;dark&#8221; button_text=&#8221;Watch this video on YouTube&#8221; button_link=&#8221;https:\/\/www.youtube.com\/watch?v=kLt_uqSCEUA&#8221; video_url=&#8221;https:\/\/www.youtube.com\/watch?v=kLt_uqSCEUA&#8221; allow_player_pause=&#8221;off&#8221;]<\/p>\n<p>Speakers: Chema Alonso | Manu &#8220;THE SUR&#8221;<\/p>\n<p>Man in the middle attacks are still one of the most powerful techniques for owning machines. In this talk MITM schemas in anonymous services are going to be discussed.<\/p>\n<p>Then attendees will see how easily a botnet using JavaScript can be created to analyze that kind of connections and some of the actions people behind those services are doing&#8230; in real.<\/p>\n<p>[\/et_pb_slide][\/et_pb_fullwidth_slider][\/et_pb_section][et_pb_section][et_pb_row][et_pb_column type=&#8221;1_4&#8243;][et_pb_number_counter admin_label=&#8221;YouTube views&#8221; title=&#8221;Views&#8221; number=&#8221;70993&#8243; percent_sign=&#8221;off&#8221; counter_color=&#8221;#2EA3F2&#8243; background_layout=&#8221;light&#8221; \/][\/et_pb_column][et_pb_column type=&#8221;1_4&#8243;][et_pb_number_counter admin_label=&#8221;YouTube likes&#8221; title=&#8221;Likes&#8221; number=&#8221;563&#8243; percent_sign=&#8221;off&#8221; counter_color=&#8221;#2EA3F2&#8243; background_layout=&#8221;light&#8221; \/][\/et_pb_column][et_pb_column type=&#8221;1_4&#8243;][et_pb_blurb admin_label=&#8221;YouTube source&#8221; title=&#8221;Source: DEFCON Conference&#8221; url=&#8221;https:\/\/www.youtube.com\/user\/DEFCONConference&#8221; url_new_window=&#8221;on&#8221; use_icon=&#8221;off&#8221; icon_color=&#8221;#2EA3F2&#8243; use_circle=&#8221;off&#8221; circle_color=&#8221;#2EA3F2&#8243; use_circle_border=&#8221;off&#8221; circle_border_color=&#8221;#2EA3F2&#8243; image=&#8221;https:\/\/yt3.ggpht.com\/-RuMBpkZnHMc\/AAAAAAAAAAI\/AAAAAAAAAAA\/JUWxGsLf4zY\/s88-c-k-no\/photo.jpg&#8221; alt=&#8221;DEFCON Conference&#8221; icon_placement=&#8221;top&#8221; animation=&#8221;left&#8221; background_layout=&#8221;light&#8221; text_orientation=&#8221;center&#8221; \/][\/et_pb_column][et_pb_column type=&#8221;1_4&#8243;][et_pb_blurb admin_label=&#8221;YouTube source&#8221; title=&#8221;Source: Christiaan008&#8243; url=&#8221;https:\/\/www.youtube.com\/user\/ChRiStIaAn008&#8243; url_new_window=&#8221;on&#8221; use_icon=&#8221;off&#8221; icon_color=&#8221;#2EA3F2&#8243; use_circle=&#8221;off&#8221; circle_color=&#8221;#2EA3F2&#8243; use_circle_border=&#8221;off&#8221; circle_border_color=&#8221;#2EA3F2&#8243; image=&#8221;https:\/\/yt3.ggpht.com\/-p4i1EttlG4A\/AAAAAAAAAAI\/AAAAAAAAAAA\/LgFFtlbO4-Q\/s88-c-k-no\/photo.jpg&#8221; alt=&#8221;TED Talks&#8221; icon_placement=&#8221;top&#8221; animation=&#8221;left&#8221; background_layout=&#8221;light&#8221; text_orientation=&#8221;center&#8221; \/][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fullwidth=&#8221;off&#8221; specialty=&#8221;off&#8221; transparent_background=&#8221;off&#8221; background_color=&#8221;#f2f2f2&#8243; inner_shadow=&#8221;on&#8221; parallax=&#8221;off&#8221; parallax_method=&#8221;off&#8221; allow_player_pause=&#8221;off&#8221;][et_pb_row][et_pb_column type=&#8221;1_2&#8243;][et_pb_blurb admin_label=&#8221;Main category: hacking&#8221; title=&#8221;Main category&#8221; url_new_window=&#8221;off&#8221; use_icon=&#8221;off&#8221; icon_color=&#8221;#2EA3F2&#8243; use_circle=&#8221;off&#8221; circle_color=&#8221;#2EA3F2&#8243; use_circle_border=&#8221;off&#8221; circle_border_color=&#8221;#2EA3F2&#8243; image=&#8221;https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2014\/10\/main_hacking_96_96_black.svg&#8221; icon_placement=&#8221;top&#8221; animation=&#8221;top&#8221; background_layout=&#8221;light&#8221; text_orientation=&#8221;center&#8221; url=&#8221;https:\/\/yt.christiaan008.com\/technical-videos-by-category\/#Hacking&#8221; alt=&#8221;Hacking&#8221;]Hacking[\/et_pb_blurb][\/et_pb_column][et_pb_column type=&#8221;1_2&#8243;][et_pb_blurb admin_label=&#8221;Subcategory: botnet&#8221; title=&#8221;Subcategory&#8221; url_new_window=&#8221;off&#8221; use_icon=&#8221;off&#8221; icon_color=&#8221;#2EA3F2&#8243; use_circle=&#8221;off&#8221; circle_color=&#8221;#2EA3F2&#8243; use_circle_border=&#8221;off&#8221; circle_border_color=&#8221;#2EA3F2&#8243; image=&#8221;https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2014\/10\/sub_botnet_168_96_black.svg&#8221; icon_placement=&#8221;top&#8221; animation=&#8221;top&#8221; background_layout=&#8221;light&#8221; text_orientation=&#8221;center&#8221; url=&#8221;https:\/\/yt.christiaan008.com\/technical-videos-by-category\/#Hacking&#8221; alt=&#8221;Botnet&#8221;]Botnet[\/et_pb_blurb][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fullwidth=&#8221;off&#8221; specialty=&#8221;off&#8221;][et_pb_row][et_pb_column type=&#8221;4_4&#8243;][et_pb_text admin_label=&#8221;Title&#8221; background_layout=&#8221;light&#8221; text_orientation=&#8221;center&#8221;]<\/p>\n<h1>Knowledge is the life of the mind<\/h1>\n<p>[\/et_pb_text][et_pb_divider admin_label=&#8221;Divider&#8221; color=&#8221;#cdcdcd&#8221; show_divider=&#8221;on&#8221; \/][\/et_pb_column][\/et_pb_row][et_pb_row][et_pb_column type=&#8221;2_3&#8243;][et_pb_image admin_label=&#8221;Javascript image&#8221; src=&#8221;https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/03\/javascript_1920_rounded.jpg&#8221; alt=&#8221;Javascript&#8221; show_in_lightbox=&#8221;off&#8221; url_new_window=&#8221;off&#8221; animation=&#8221;left&#8221; sticky=&#8221;off&#8221; \/][\/et_pb_column][et_pb_column type=&#8221;1_3&#8243;][et_pb_blurb admin_label=&#8221;Creating a JavaScript botnet&#8221; title=&#8221;Creating a JavaScript botnet&#8221; url=&#8221;http:\/\/www.chmag.in\/article\/jan2011\/javascript-botnets&#8221; url_new_window=&#8221;on&#8221; use_icon=&#8221;off&#8221; font_icon=&#8221;p&#8221; icon_color=&#8221;#2EA3F2&#8243; use_circle=&#8221;off&#8221; circle_color=&#8221;#2EA3F2&#8243; use_circle_border=&#8221;off&#8221; circle_border_color=&#8221;#2EA3F2&#8243; icon_placement=&#8221;left&#8221; animation=&#8221;left&#8221; background_layout=&#8221;light&#8221; text_orientation=&#8221;left&#8221; image=&#8221;https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/02\/article_96_96_blue.svg&#8221; alt=&#8221;Article&#8221;]<\/p>\n<p>A JavaScript botnet would include thousands of systems that have the attacker controlled page open on their browsers for an extended duration allowing continued execution of the attacker\u2019s JavaScript.<\/p>\n<p><a href=\"http:\/\/www.chmag.in\/article\/jan2011\/javascript-botnets\" target=\"_blank\">Learn more about creating a JavaScript botnet<\/a><\/p>\n<p>[\/et_pb_blurb][et_pb_blurb admin_label=&#8221;There are no malicious exploits being used, so there is nothing that can be patched&#8221; title=&#8221;There are no malicious exploits being used, so there is nothing that can be patched&#8221; url=&#8221;http:\/\/www.pcworld.idg.com.au\/article\/522845\/researcher_builds_botnet-powered_distributed_file_storage_system_using_javascript\/&#8221; url_new_window=&#8221;on&#8221; use_icon=&#8221;off&#8221; font_icon=&#8221;p&#8221; icon_color=&#8221;#2EA3F2&#8243; use_circle=&#8221;off&#8221; circle_color=&#8221;#2EA3F2&#8243; use_circle_border=&#8221;off&#8221; circle_border_color=&#8221;#2EA3F2&#8243; icon_placement=&#8221;left&#8221; animation=&#8221;left&#8221; background_layout=&#8221;light&#8221; text_orientation=&#8221;left&#8221; image=&#8221;https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/02\/article_96_96_blue.svg&#8221; alt=&#8221;Article&#8221;]<\/p>\n<p>Building the botnet by getting other people&#8217;s browsers to load a piece of JavaScript code and storing data on their computers falls into a legally gray area, Malone\u00a0said. <a href=\"http:\/\/www.pcworld.idg.com.au\/article\/522845\/researcher_builds_botnet-powered_distributed_file_storage_system_using_javascript\/\" target=\"_blank\">Read more<\/a><\/p>\n<p>[\/et_pb_blurb][\/et_pb_column][\/et_pb_row][et_pb_row][et_pb_column type=&#8221;1_3&#8243;][et_pb_blurb admin_label=&#8221;Proxy Rewrite = JavaScript Botnet&#8221; title=&#8221;Proxy Rewrite = JavaScript Botnet&#8221; url=&#8221;http:\/\/brod.io\/blog\/proxy-rewrite-javascript-botnet\/&#8221; url_new_window=&#8221;on&#8221; use_icon=&#8221;off&#8221; font_icon=&#8221;\ue058&#8221; icon_color=&#8221;#2EA3F2&#8243; use_circle=&#8221;off&#8221; circle_color=&#8221;#2EA3F2&#8243; use_circle_border=&#8221;off&#8221; circle_border_color=&#8221;#2EA3F2&#8243; icon_placement=&#8221;left&#8221; animation=&#8221;left&#8221; background_layout=&#8221;light&#8221; text_orientation=&#8221;left&#8221; image=&#8221;https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/02\/article_96_96_blue.svg&#8221; alt=&#8221;Article&#8221;]<\/p>\n<p style=\"text-align: left;\">After watching\u00a0<a href=\"https:\/\/twitter.com\/chemaalonso\" target=\"_blank\">Chema Alonso<\/a> at DEF CON\u00a020 I started wondering how hard it could be to build a Javascript botnet. Chema said it took him a day, when I tried it I beat that record by 22 hours and 15minutes and that\u2019s from creating a new Digital Ocean droplet to getting my first victim. <a href=\"http:\/\/brod.io\/blog\/proxy-rewrite-javascript-botnet\/\" target=\"_blank\">Read more<\/a><\/p>\n<p>[\/et_pb_blurb][\/et_pb_column][et_pb_column type=&#8221;2_3&#8243;][et_pb_blurb admin_label=&#8221;An analysis of the Asprox botnet&#8221; title=&#8221;An analysis of the Asprox botnet&#8221; url=&#8221;https:\/\/www.isti.tu-berlin.de\/fileadmin\/fg214\/Papers\/ravi-asprox.pdf&#8221; url_new_window=&#8221;on&#8221; use_icon=&#8221;off&#8221; icon_color=&#8221;#2EA3F2&#8243; use_circle=&#8221;off&#8221; circle_color=&#8221;#2EA3F2&#8243; use_circle_border=&#8221;off&#8221; circle_border_color=&#8221;#2EA3F2&#8243; image=&#8221;https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/02\/whitepaper_96_96_blue.svg&#8221; alt=&#8221;Whitepaper&#8221; icon_placement=&#8221;top&#8221; animation=&#8221;right&#8221; background_layout=&#8221;light&#8221; text_orientation=&#8221;center&#8221;]<\/p>\n<p>Botherders automate\u00a0the SQL attack vector to search potential\u00a0SQL servers through Google search engine and then try to infect the server by inserting a malicious JavaScript file.<\/p>\n<p><a href=\"https:\/\/www.isti.tu-berlin.de\/fileadmin\/fg214\/Papers\/ravi-asprox.pdf\" target=\"_blank\">Learn more about the\u00a0Asprox botnet<\/a><\/p>\n<p>[\/et_pb_blurb][\/et_pb_column][\/et_pb_row][et_pb_row][et_pb_column type=&#8221;1_2&#8243;][et_pb_blurb admin_label=&#8221;HiveMind: Distributed file storage using JavaScript botnets&#8221; title=&#8221;HiveMind: Distributed file storage using JavaScript botnets&#8221; url=&#8221;https:\/\/www.youtube.com\/watch?v=GAq86wfeC9E&#8221; url_new_window=&#8221;on&#8221; use_icon=&#8221;off&#8221; font_icon=&#8221;p&#8221; icon_color=&#8221;#2EA3F2&#8243; use_circle=&#8221;off&#8221; circle_color=&#8221;#2EA3F2&#8243; use_circle_border=&#8221;off&#8221; circle_border_color=&#8221;#2EA3F2&#8243; icon_placement=&#8221;top&#8221; animation=&#8221;top&#8221; background_layout=&#8221;light&#8221; text_orientation=&#8221;left&#8221; image=&#8221;https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/02\/presentation_128_96_blue.svg&#8221; alt=&#8221;Presentation&#8221;]<\/p>\n<p><a href=\"http:\/\/www.seantmalone.com\/\" target=\"_blank\">Sean Malone<\/a> gave a presentation at <a href=\"https:\/\/www.defcon.org\/html\/defcon-21\/dc-21-index.html\" target=\"_blank\">DEF CON 21<\/a> about the methodology and tools required to create a distributed file store built on top of a JavaScript botnet.<\/p>\n<p>[\/et_pb_blurb][\/et_pb_column][et_pb_column type=&#8221;1_2&#8243;][et_pb_video admin_label=&#8221;DEFCON 21: HiveMind Distributed File Storage Using JavaScript Botnets&#8221; src=&#8221;https:\/\/www.youtube.com\/watch?v=GAq86wfeC9E&#8221; image_src=&#8221;\/\/i.ytimg.com\/vi\/GAq86wfeC9E\/hqdefault.jpg&#8221; \/][\/et_pb_column][\/et_pb_row][et_pb_row][et_pb_column type=&#8221;4_4&#8243;][et_pb_tabs admin_label=&#8221;Tabs: articles, presentations, tutorials, whitepapers&#8221;][et_pb_tab title=&#8221;Articles&#8221;]<\/p>\n<p><img decoding=\"async\" class=\"alignleft size-full wp-image-6481\" src=\"https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/02\/article_96_96_blue.svg\" alt=\"article_96_96_blue\" \/><\/p>\n<p style=\"padding-left: 150px;\"><a href=\"http:\/\/arstechnica.com\/security\/2014\/04\/how-a-website-flaw-turned-22000-visitors-into-a-botnet-of-ddos-zombies\/\" target=\"_blank\">How a website flaw turned 22,000 visitors into a botnet of DDoS zombies<br \/>\n<\/a>Date: 07-04-2014<br \/>\nSource: <a href=\"http:\/\/arstechnica.com\/\" target=\"_blank\">Arstechnica<\/a><\/p>\n<p style=\"padding-left: 150px;\"><a href=\"http:\/\/www.networkworld.com\/article\/2168696\/malware-cybercrime\/black-hat--how-to-create-a-massive-ddos-botnet-using-cheap-online-ads.html\" target=\"_blank\">Black Hat: How to create a massive DDoS botnet using cheap online ads<br \/>\n<\/a>Date: 01-08-2013<br \/>\nSource: <a href=\"http:\/\/www.networkworld.com\/\" target=\"_blank\">Networkworld<\/a><\/p>\n<p style=\"padding-left: 150px;\"><a href=\"http:\/\/threatpost.com\/buy-an-ad-own-a-browser-botnet\/101550\" target=\"_blank\">Buy An Ad, Own a Browser Botnet<br \/>\n<\/a>Date: 31-07-2013<br \/>\nSource:\u00a0<a href=\"http:\/\/threatpost.com\/\" target=\"_blank\">Threatpost<\/a><\/p>\n<p style=\"padding-left: 150px;\"><a href=\"http:\/\/www.theregister.co.uk\/2013\/07\/31\/whitehat_security_ad_networks_botnet\/\" target=\"_blank\">Malicious JavaScript flips ad network into rentable botnet<br \/>\n<\/a>Date: 31-07-2013<br \/>\nSource: <a href=\"http:\/\/www.theregister.co.uk\/\" target=\"_blank\">The Register<\/a><\/p>\n<p style=\"padding-left: 150px;\"><a href=\"http:\/\/www.spider.io\/blog\/2013\/03\/chameleon-botnet\/\" target=\"_blank\">Discovered: Botnet costing display advertisers over six million dollars per month<br \/>\n<\/a>Date: 19-03-2013<br \/>\nSource:\u00a0<a href=\"http:\/\/www.spider.io\/\" target=\"_blank\">Spider.io<\/a><\/p>\n<p style=\"padding-left: 150px;\"><a href=\"http:\/\/privacy-pc.com\/articles\/owning-bad-guys-and-mafia-with-javascript-botnets.html\" target=\"_blank\">Owning bad guys and mafia with JavaScript botnets<br \/>\n<\/a>Date: 18-12-2012<br \/>\nSource:\u00a0<a href=\"http:\/\/privacy-pc.com\/\" target=\"_blank\">PrivacyPC<\/a><\/p>\n<p style=\"padding-left: 150px;\"><a href=\"http:\/\/www.darkreading.com\/analytics\/threat-intelligence\/javascript-botnet-sheds-light-on-criminal-activity\/d\/d-id\/1138121?\" target=\"_blank\">JavaScript botnet sheds light on criminal activity<br \/>\n<\/a>Date: 27-07-2012<br \/>\nSource:\u00a0<a href=\"http:\/\/www.darkreading.com\/\" target=\"_blank\">DARKReading<\/a><\/p>\n<p style=\"padding-left: 150px;\"><a href=\"http:\/\/www.infoworld.com\/article\/2662490\/security\/javascript-botnet-code-leaked-to-internet.html\" target=\"_blank\">JavaScript botnet code leaked to Internet<\/a><br \/>\nDate: 02-04-2007<br \/>\nSource: <a href=\"http:\/\/www.infoworld.com\/\" target=\"_blank\">InfoWorld<\/a><\/p>\n<p>[\/et_pb_tab][et_pb_tab title=&#8221;Presentations&#8221;]<\/p>\n<p><img decoding=\"async\" class=\"alignleft size-full wp-image-6479\" src=\"https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/02\/presentation_128_96_blue.svg\" alt=\"presentation_128_96_blue\" \/><\/p>\n<p style=\"padding-left: 150px;\"><a href=\"http:\/\/media.blackhat.com\/bh-us-12\/Briefings\/Alonso\/BH_US_12_Alonso_Owning_Bad_Guys_Slides.pdf\" target=\"_blank\">Owning &#8220;bad&#8221; guys\u00a0{and mafia} with\u00a0Javascript botnets<\/a><br \/>\nSource:\u00a0<a href=\"https:\/\/www.blackhat.com\" target=\"_blank\">BlackHat<\/a><\/p>\n<p style=\"padding-left: 150px;\"><a href=\"http:\/\/www.irongeek.com\/i.php?page=videos\/bsideslasvegas2013\/1-1-5-hivemind-distributed-file-storage-using-javascript-botnets-sean-malone\" target=\"_blank\">HiveMind: Distributed file storage using JavaScript botnets<\/a><br \/>\nSource: <a href=\"http:\/\/www.irongeek.com\/\" target=\"_blank\">Irongeek<\/a><\/p>\n<p style=\"padding-left: 150px;\"><a href=\"https:\/\/crypto.stanford.edu\/cs142\/lectures\/05-malicious-javascript.ppt\" target=\"_blank\">Phishing and \u000bmalicious JavaScript<\/a><br \/>\nSource: <a href=\"http:\/\/crypto.stanford.edu\/\" target=\"_blank\">Stanford University<\/a><\/p>\n<p>[\/et_pb_tab][et_pb_tab title=&#8221;Whitepapers&#8221;]<\/p>\n<p><img decoding=\"async\" class=\"alignleft size-full wp-image-6477\" src=\"https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/02\/whitepaper_96_96_blue.svg\" alt=\"whitepaper_96_96_blue\" \/><\/p>\n<p style=\"padding-left: 150px;\"><a href=\"http:\/\/media.blackhat.com\/bh-us-12\/Briefings\/Alonso\/BH_US_12_Alonso_Owning_Bad_Guys_WP.pdf\" target=\"_blank\">Owning Bad Guys {&amp; Mafia} with JavaScript Botnets<\/a><br \/>\nSource:\u00a0<a href=\"https:\/\/www.blackhat.com\" target=\"_blank\">BlackHat<\/a><\/p>\n<p style=\"padding-left: 150px;\"><a href=\"https:\/\/media.blackhat.com\/bh-ad-10\/Kuppan\/Blackhat-AD-2010-Kuppan-Attacking-with-HTML5-wp.pdf\" target=\"_blank\">Attacking\u00a0with\u00a0HTML5<br \/>\n<\/a>Date: 18-10-2010<br \/>\nSource:\u00a0<a href=\"https:\/\/www.blackhat.com\" target=\"_blank\">BlackHat<\/a><\/p>\n<p>[\/et_pb_tab][\/et_pb_tabs][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fullwidth=&#8221;off&#8221; specialty=&#8221;off&#8221; transparent_background=&#8221;off&#8221; background_color=&#8221;#f2f2f2&#8243; inner_shadow=&#8221;on&#8221; parallax=&#8221;on&#8221; parallax_method=&#8221;on&#8221; allow_player_pause=&#8221;off&#8221;][et_pb_row][et_pb_column type=&#8221;4_4&#8243;][et_pb_text admin_label=&#8221;Title&#8221; background_layout=&#8221;light&#8221; text_orientation=&#8221;center&#8221;]<\/p>\n<h1>Change your thoughts and you change your world<\/h1>\n<p>[\/et_pb_text][et_pb_divider admin_label=&#8221;Divider&#8221; color=&#8221;#cdcdcd&#8221; show_divider=&#8221;on&#8221; \/][et_pb_filterable_portfolio admin_label=&#8221;Filterable Portfolio&#8221; fullwidth=&#8221;off&#8221; posts_number=&#8221;4&#8243; include_categories=&#8221;106,90&#8243; show_title=&#8221;on&#8221; show_categories=&#8221;off&#8221; show_pagination=&#8221;on&#8221; background_layout=&#8221;light&#8221; \/][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fullwidth=&#8221;off&#8221; specialty=&#8221;off&#8221; transparent_background=&#8221;on&#8221; background_color=&#8221;#f2f2f2&#8243; inner_shadow=&#8221;on&#8221; parallax=&#8221;on&#8221; parallax_method=&#8221;on&#8221; allow_player_pause=&#8221;off&#8221;][et_pb_row][et_pb_column type=&#8221;4_4&#8243;][et_pb_text admin_label=&#8221;Title&#8221; background_layout=&#8221;light&#8221; text_orientation=&#8221;center&#8221;]<\/p>\n<h1>Believe you can and you\u2019re halfway there<\/h1>\n<p>[\/et_pb_text][et_pb_divider admin_label=&#8221;Divider&#8221; color=&#8221;#cdcdcd&#8221; show_divider=&#8221;on&#8221; \/][\/et_pb_column][\/et_pb_row][et_pb_row][et_pb_column type=&#8221;1_2&#8243;][et_pb_blurb admin_label=&#8221;Video wall&#8221; url_new_window=&#8221;off&#8221; use_icon=&#8221;off&#8221; icon_color=&#8221;#2EA3F2&#8243; use_circle=&#8221;off&#8221; circle_color=&#8221;#2EA3F2&#8243; use_circle_border=&#8221;off&#8221; circle_border_color=&#8221;#2EA3F2&#8243; image=&#8221;https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/02\/technical_video_wall.jpg&#8221; icon_placement=&#8221;top&#8221; animation=&#8221;left&#8221; background_layout=&#8221;light&#8221; text_orientation=&#8221;center&#8221; url=&#8221;https:\/\/yt.christiaan008.com\/technical-videos\/&#8221; alt=&#8221;Video wall&#8221; \/][et_pb_cta admin_label=&#8221;Call To Action&#8221; button_url=&#8221;https:\/\/yt.christiaan008.com\/technical-videos\/&#8221; button_text=&#8221;Video wall&#8221; use_background_color=&#8221;off&#8221; background_color=&#8221;#f2f2f2&#8243; background_layout=&#8221;light&#8221; text_orientation=&#8221;center&#8221; \/][\/et_pb_column][et_pb_column type=&#8221;1_2&#8243;][et_pb_blurb admin_label=&#8221;Videos by category&#8221; url_new_window=&#8221;off&#8221; use_icon=&#8221;off&#8221; icon_color=&#8221;#2EA3F2&#8243; use_circle=&#8221;off&#8221; circle_color=&#8221;#2EA3F2&#8243; use_circle_border=&#8221;off&#8221; circle_border_color=&#8221;#2EA3F2&#8243; image=&#8221;https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/02\/technical_categories.jpg&#8221; icon_placement=&#8221;top&#8221; animation=&#8221;right&#8221; background_layout=&#8221;light&#8221; text_orientation=&#8221;center&#8221; url=&#8221;https:\/\/yt.christiaan008.com\/technical-videos-by-category\/&#8221; alt=&#8221;Videos by category&#8221; \/][et_pb_cta admin_label=&#8221;Call To Action&#8221; button_url=&#8221;https:\/\/yt.christiaan008.com\/technical-videos-by-category\/&#8221; button_text=&#8221;Videos by category&#8221; use_background_color=&#8221;off&#8221; background_color=&#8221;#2EA3F2&#8243; background_layout=&#8221;light&#8221; text_orientation=&#8221;center&#8221; \/][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In this talk MITM schemas in anonymous services are discussed. Attendees will see how easily a botnet using JavaScript can be created to analyse that kind of connections and some of the actions people behind those services are doing.<\/p>\n","protected":false},"author":2,"featured_media":6690,"comment_status":"open","ping_status":"open","template":"","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","inline_featured_image":false,"footnotes":""},"project_category":[106,163,217,14,154,90,198],"project_tag":[],"class_list":["post-800","project","type-project","status-publish","has-post-thumbnail","hentry","project_category-botnet-2","project_category-def-con","project_category-def-con-20","project_category-grid_slider3","project_category-hacking-main","project_category-technical_grid_slider3","project_category-rss-all"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Owning bad guys (and mafia) with JavaScript botnets | Christiaan&#039;s collection<\/title>\n<meta name=\"description\" content=\"In this talk MITM schemas in anonymous services are discussed. Attendees will see how easily a botnet using JavaScript can be created to analyse that kind of connections and some of the actions people behind those services are doing.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/yt.christiaan008.com\/?project=owning-bad-guys-and-mafia-with-javascript-botnets\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Owning bad guys (and mafia) with JavaScript botnets | Christiaan&#039;s collection\" \/>\n<meta property=\"og:description\" content=\"In this talk MITM schemas in anonymous services are discussed. Attendees will see how easily a botnet using JavaScript can be created to analyse that kind of connections and some of the actions people behind those services are doing.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/yt.christiaan008.com\/?project=owning-bad-guys-and-mafia-with-javascript-botnets\" \/>\n<meta property=\"og:site_name\" content=\"Christiaan&#039;s collection\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/christiaan008\" \/>\n<meta property=\"article:modified_time\" content=\"2015-06-08T08:57:25+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/03\/javascript_1920_rounded.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1950\" \/>\n\t<meta property=\"og:image:height\" content=\"1312\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@christiaan008\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"10 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/yt.christiaan008.com\\\/?project=owning-bad-guys-and-mafia-with-javascript-botnets\",\"url\":\"https:\\\/\\\/yt.christiaan008.com\\\/?project=owning-bad-guys-and-mafia-with-javascript-botnets\",\"name\":\"Owning bad guys (and mafia) with JavaScript botnets | Christiaan&#039;s collection\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/yt.christiaan008.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/yt.christiaan008.com\\\/?project=owning-bad-guys-and-mafia-with-javascript-botnets#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/yt.christiaan008.com\\\/?project=owning-bad-guys-and-mafia-with-javascript-botnets#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/yt.christiaan008.com\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2015\\\/03\\\/javascript_1920_rounded.jpg\",\"datePublished\":\"2014-09-17T19:11:14+00:00\",\"dateModified\":\"2015-06-08T08:57:25+00:00\",\"description\":\"In this talk MITM schemas in anonymous services are discussed. Attendees will see how easily a botnet using JavaScript can be created to analyse that kind of connections and some of the actions people behind those services are doing.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/yt.christiaan008.com\\\/?project=owning-bad-guys-and-mafia-with-javascript-botnets#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/yt.christiaan008.com\\\/?project=owning-bad-guys-and-mafia-with-javascript-botnets\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/yt.christiaan008.com\\\/?project=owning-bad-guys-and-mafia-with-javascript-botnets#primaryimage\",\"url\":\"https:\\\/\\\/yt.christiaan008.com\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2015\\\/03\\\/javascript_1920_rounded.jpg\",\"contentUrl\":\"https:\\\/\\\/yt.christiaan008.com\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2015\\\/03\\\/javascript_1920_rounded.jpg\",\"width\":1950,\"height\":1312},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/yt.christiaan008.com\\\/?project=owning-bad-guys-and-mafia-with-javascript-botnets#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/yt.christiaan008.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Projects\",\"item\":\"https:\\\/\\\/yt.christiaan008.com\\\/?post_type=project\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Owning bad guys (and mafia) with JavaScript botnets\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/yt.christiaan008.com\\\/#website\",\"url\":\"https:\\\/\\\/yt.christiaan008.com\\\/\",\"name\":\"Christiaan&#039;s collection\",\"description\":\"A great collection of security related videos!\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/yt.christiaan008.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Owning bad guys (and mafia) with JavaScript botnets | Christiaan&#039;s collection","description":"In this talk MITM schemas in anonymous services are discussed. Attendees will see how easily a botnet using JavaScript can be created to analyse that kind of connections and some of the actions people behind those services are doing.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/yt.christiaan008.com\/?project=owning-bad-guys-and-mafia-with-javascript-botnets","og_locale":"en_US","og_type":"article","og_title":"Owning bad guys (and mafia) with JavaScript botnets | Christiaan&#039;s collection","og_description":"In this talk MITM schemas in anonymous services are discussed. Attendees will see how easily a botnet using JavaScript can be created to analyse that kind of connections and some of the actions people behind those services are doing.","og_url":"https:\/\/yt.christiaan008.com\/?project=owning-bad-guys-and-mafia-with-javascript-botnets","og_site_name":"Christiaan&#039;s collection","article_publisher":"https:\/\/www.facebook.com\/christiaan008","article_modified_time":"2015-06-08T08:57:25+00:00","og_image":[{"width":1950,"height":1312,"url":"https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/03\/javascript_1920_rounded.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_site":"@christiaan008","twitter_misc":{"Est. reading time":"10 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/yt.christiaan008.com\/?project=owning-bad-guys-and-mafia-with-javascript-botnets","url":"https:\/\/yt.christiaan008.com\/?project=owning-bad-guys-and-mafia-with-javascript-botnets","name":"Owning bad guys (and mafia) with JavaScript botnets | Christiaan&#039;s collection","isPartOf":{"@id":"https:\/\/yt.christiaan008.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/yt.christiaan008.com\/?project=owning-bad-guys-and-mafia-with-javascript-botnets#primaryimage"},"image":{"@id":"https:\/\/yt.christiaan008.com\/?project=owning-bad-guys-and-mafia-with-javascript-botnets#primaryimage"},"thumbnailUrl":"https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/03\/javascript_1920_rounded.jpg","datePublished":"2014-09-17T19:11:14+00:00","dateModified":"2015-06-08T08:57:25+00:00","description":"In this talk MITM schemas in anonymous services are discussed. Attendees will see how easily a botnet using JavaScript can be created to analyse that kind of connections and some of the actions people behind those services are doing.","breadcrumb":{"@id":"https:\/\/yt.christiaan008.com\/?project=owning-bad-guys-and-mafia-with-javascript-botnets#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/yt.christiaan008.com\/?project=owning-bad-guys-and-mafia-with-javascript-botnets"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/yt.christiaan008.com\/?project=owning-bad-guys-and-mafia-with-javascript-botnets#primaryimage","url":"https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/03\/javascript_1920_rounded.jpg","contentUrl":"https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/03\/javascript_1920_rounded.jpg","width":1950,"height":1312},{"@type":"BreadcrumbList","@id":"https:\/\/yt.christiaan008.com\/?project=owning-bad-guys-and-mafia-with-javascript-botnets#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/yt.christiaan008.com\/"},{"@type":"ListItem","position":2,"name":"Projects","item":"https:\/\/yt.christiaan008.com\/?post_type=project"},{"@type":"ListItem","position":3,"name":"Owning bad guys (and mafia) with JavaScript botnets"}]},{"@type":"WebSite","@id":"https:\/\/yt.christiaan008.com\/#website","url":"https:\/\/yt.christiaan008.com\/","name":"Christiaan&#039;s collection","description":"A great collection of security related videos!","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/yt.christiaan008.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/yt.christiaan008.com\/index.php?rest_route=\/wp\/v2\/project\/800","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/yt.christiaan008.com\/index.php?rest_route=\/wp\/v2\/project"}],"about":[{"href":"https:\/\/yt.christiaan008.com\/index.php?rest_route=\/wp\/v2\/types\/project"}],"author":[{"embeddable":true,"href":"https:\/\/yt.christiaan008.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/yt.christiaan008.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=800"}],"version-history":[{"count":23,"href":"https:\/\/yt.christiaan008.com\/index.php?rest_route=\/wp\/v2\/project\/800\/revisions"}],"predecessor-version":[{"id":7158,"href":"https:\/\/yt.christiaan008.com\/index.php?rest_route=\/wp\/v2\/project\/800\/revisions\/7158"}],"wp:attachment":[{"href":"https:\/\/yt.christiaan008.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=800"}],"wp:term":[{"taxonomy":"project_category","embeddable":true,"href":"https:\/\/yt.christiaan008.com\/index.php?rest_route=%2Fwp%2Fv2%2Fproject_category&post=800"},{"taxonomy":"project_tag","embeddable":true,"href":"https:\/\/yt.christiaan008.com\/index.php?rest_route=%2Fwp%2Fv2%2Fproject_tag&post=800"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}