JavaScript Forensics - Speaker Deck

Slide 1

Slide 1 text

WANTED JavaScript Forensics Todd H Gardner @toddhgardner

Slide 2

Slide 2 text

Wild Wild Web

Slide 3

Slide 3 text

WANTED @toddhgardner JavaScript Outlaws

Slide 4

Slide 4 text

Soliloquy

Slide 5

Slide 5 text

{Track:js} https://trackjs.com JavaScript Error Monitoring

Slide 6

Slide 6 text

Scripty Joe WANTED Characteristics: Script Error Impact: Unknown Reward $5,00

Slide 7

Slide 7 text

No content

Slide 8

Slide 8 text

Soliloquy

Slide 9

Slide 9 text

Scripty “Line 1” Joe Place of Origin: Characteristics: Associates: Browser Obfuscation Noisy 3rd party domains Apprehend with CORS and crossorigin attributes Remarks:

Slide 10

Slide 10 text

Jane Adsy WANTED Characteristics: getRandomAds is not defined Impact: global Reward $5,00

Slide 11

Slide 11 text

No content

Slide 12

Slide 12 text

Soliloquy

Slide 13

Slide 13 text

Jane “3rd Party” Adsy Place of Origin: Characteristics: Associates: Unplanned Changes Sudden bursts of violence SaaS, Analytics, CDN Weigh risk vs value of 3rd party dependencies Remarks:

Slide 14

Slide 14 text

Clara Context WANTED Characteristics: Cannot read propert of undefined Impact: major Reward $5,00

Slide 15

Slide 15 text

Error Cannot read property ‘destroy’ of undefined User Click

Slide 16

Slide 16 text

Soliloquy

Slide 17

Slide 17 text

Clara “This&That” Context Place of Origin: Characteristics: Associates: Functional Args Not Defined Callbacks, Promises Can usually be discovered through test Remarks:

Slide 18

Slide 18 text

Dolly Data WANTED Characteristics: Substr is not a function Impact: isolated Reward $5,00

Slide 19

Slide 19 text

a.text.substr is not a function

Slide 20

Slide 20 text

Soliloquy

Slide 21

Slide 21 text

Dolly “Bad Shape” Data Place of Origin: Characteristics: Associates: Contract Changes Production Faults Separated Dev Teams Difficult to prevent with test Remarks:

Slide 22

Slide 22 text

Logan Noloaden WANTED Characteristics: INLINE_ADS is not a function Impact: major Reward $5,00

Slide 23

Slide 23 text

No content

Slide 24

Slide 24 text

Soliloquy

Slide 25

Slide 25 text

Logan “404” Noloaden Place of Origin: Characteristics: Associates: Flaky Infrastructre 404, is undefined The Internet Verify load before invoking external functions. Remarks:

Slide 26

Slide 26 text

Mabrowser Crashin WANTED Characteristics: Slow perf, browser crash Impact: catastrophic Reward $5,00

Slide 27

Slide 27 text

No content

Slide 28

Slide 28 text

Soliloquy

Slide 29

Slide 29 text

Mabrowser Crashin Place of Origin: Characteristics: Associates: Detached Elements Slow Perf, Crashing Clientside Rendering Periodic scanning for memory leaks. Remarks:

Slide 30

Slide 30 text

CAPTURED @toddhgardner JavaScript Outlaws Scripty Joe Jane Adsy Clara Context Dolly Data Logan Noloaden Mabrowser Crashi

Slide 31

Slide 31 text

{Track:js} https://trackjs.com JavaScript Error Monitoring

Slide 32

Slide 32 text

User Activity AJAX History Console Logs Browser Info Inline Source Async Traces

Slide 33

Slide 33 text

WANTED JavaScript Forensics Todd H Gardner @toddhgardner todd@trackjs.com