Fergie's Tech Blog

JavaScript Botnet Code Escapes ShmooCon, Leaks Onto Web

Robert McMillan writes on ComputerWorld:

Software that could be used to turn a Web browser into an unwitting hacker's tool has been posted to the Internet, after it was downloaded by a quick-thinking attendee at last month's Shmoocon hacker conference.

The software, called Jitko, was written by Billy Hoffman, lead researcher at Spy Dynamics Inc. Hoffman demonstrated the code on March 24 as part of a presentation on the dangers of JavaScript malware.

Hoffman had discovered a way to write a Web vulnerability scanner in JavaScript, a Web language that can run in any browser. This technique circumvents JavaScript's security restrictions and, concerned that his Jitko code could be misused, Hoffman says he took extra steps to prevent the code from getting out.

However, in order for his demonstration to work, he had to post the Jitko code somewhere on the Internet. "Very briefly you could see the original URL of where the Jitko code got fetched," Hoffman said.

That was enough for show attendee Mike Schroll to snag a copy.

posted by Fergie @ 4/02/2007 02:24:00 PM