Rootkits for JavaScript Environments

[Nytro]

Rootkits for JavaScript Environments

Ben Adida

Harvard University

ben

adida@harvard.edu

Adam Barth

UC Berkeley

abarth@eecs.berkeley.edu

Collin Jackson

Stanford University

collinj@cs.stanford.edu

Abstract

A number of commercial cloud-based password

managers use bookmarklets to automatically populate

and submit login forms. Unfortunately, an attacker web

site can maliciously alter the JavaScript environment

and, when the login bookmarklet is invoked, steal the

user’s passwords. We describe general attack tech-

niques for altering a bookmarklet’s JavaScript envi-

ronment and apply them to extracting passwords from

six commercial password managers. Our proposed

solution has been adopted by several of the commercial

vendors.

Download:

http://static.usenix.org/event/woot09/tech/full_papers/adida.pdf