Owning Bad Guys with Javascript Botnets

Architecture and Background

Copy of the slides for this talk are here: Whitepaper: Owning Bad Guys {And Mafia} With Javascript Botnets Chema Alonso Security Researcher, Informatica64 Manu "The Sur" Penetration Tester, Informatica64 Man in the middle attacks are still one of the most powerful techniques for owning machines. In this talk MITM schemas in anonymous services are going to be discussed. Then attendees will see how easily a botnet using javascript can be created to analyze that kind of connections and some of the actions people behind those services are doing...

Vulnerability Analysis

in real. It promises to be funny. Chema Alonso is a Security researcher with Informatica64, a Madrid-based security firm.

Exploitation and Demonstrations

Chema holds respective Computer Science and System Engineering degrees from Rey Juan Carlos University and Universidad Politècnica de Madrid. During his more than eight years as a security professional, he has consistently been recognized as a Microsoft Most Valuable Professional (MVP). Chema is a frequent speaker at industry events (Microsoft Technet / Security Tour, AseguraIT) and has been invited to present at information security conferences worldwide including Yahoo!

Remediation and Defensive Strategies

Security Week, Black Hat Briefings, ShmooCON, DeepSec, HackCON, Ekoparty and RootedCon - He is a frequent contributor on several technical magazines in Spain, where he is involved with state-of-the-art attack and defense mechanisms, web security, general ethical hacking techniques and FOCA. Twitter: @chemaalonso www.informatica64.com Manu has been working in all security areas since he got into Informatica64. He is a security pentester, a developer coding in projects like FOCA and a very good security research in areas such as Connection String Parameter Pollution Attacks or malware. He has the honor of being the man behind some of the most powerful "C# spaghetti lines" of FOCA.