Meeting #4.

1. Debugging proxy tuning for fun and profit
By Peter Volkov

2. Still using wireshark for HTTP debugging/analysis?

3. Use appropriate tools!

4. JScript based scripting engine

5. Fiddler script basics

6. My favorite use case:
Where did this @$%^ came from?
Easy case:

7. But what if plaintext search doesn’t help?
Inspect all these 60+ js from 10+ hosts manually?

8. Breakpoints!

9. Breakpoints!

10. Fiddler script basics

11. Fiddler script basics

14. Go get some exploit kits regexps on
http://www.malwaresigs.com/

15. Dyndns, .in, .cn, etc
http://mirror1.malwaredomains.com/files/dynamic_dns.txt

18. Setting referrer
Disabling HTTP cookies

19. Download ‘em all!

20. The end.