6th European Conference - Academic Conferences

Ivan Burke and Renier van Heerden
Figure 7: Botnet Gadget
In the remainder of this Section we discuss the attacks we added to our PoC Botnet Gadget and we
discuss some of the information obtained by our Botnet Gadget.
We used the JavaScript function provided by Cabri (2007) to extract user history information such
which Social network site the gadget user has visited and which bank he or she uses. Cabri’s (2007)
script can only determine if a site has been visited hence it is an exaustive search, hence we scanned
though a targeted list of URLs for information we were interested in. We used JSON IP Adress
recovery script provided by (Bullock, 2010), to determin gadget user IP Time zone and general
geographical location using the retrieved IP.
Figure 8: Sample of JSON IP recovery script
To determine if the gadget user has auto login for social network sites we create hidden iFrames to try
and access logged in content of social media sites. We queried the iFrame content to determine
whether the iFrame was redirected to Login page or whether it could access the content. This data
along with IP and history data was posted back to our own remote server using Google’s
makeRequest() function.
For a denial of service attack we used one of our own servers and requested fictitious pages from it
using makeRequest() function. We placed fetch request in a n endless loop that generated
39