the end of anonymity on anonymous networks
TRANSCRIPT
![Page 1: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/1.jpg)
TOR, I2P, FREENET… FOR WHAT?
![Page 2: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/2.jpg)
DEANONYMIZATOR… THE END OF ANONYMITY ON ANONYMOUS NETWORKS
Denis Makrushin (@difezza), Maria GarnaevaGlobal Research and Analysis Team
![Page 3: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/3.jpg)
«I KNOW WHAT YOU DID LAST SUMMER»
![Page 4: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/4.jpg)
… BUT HOW?!
![Page 5: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/5.jpg)
EXPLOITS, FINGERPRINTING… YEP-YEP.
![Page 6: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/6.jpg)
FLASH, HTML5, ENTRY-NODE DETECTION… YEP-YEP.
![Page 7: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/7.jpg)
BUT HOW …
… did they found my mega-private-0day-forum?!
… did the found me?!
![Page 8: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/8.jpg)
PASSIVE DATA COLLECTION SYSTEM… OR HOW DID THE FOUND MY MEGA-PRIVATE-0DAY-FORUM?!
![Page 9: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/9.jpg)
>> EXITPOLICY ACCEPT *:*
![Page 10: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/10.jpg)
>>TSHARK –I 1 –W DUMP.PCAP
![Page 11: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/11.jpg)
TOR-USER’S PSYCHOLOGICAL PORTRAIT
![Page 12: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/12.jpg)
PSYCHOLOGICAL PORTRAIT. PART TWO.
![Page 13: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/13.jpg)
BlackMarket; 14.32
DDoS-campaign; 3.03
Finan-cialServices; 2.82
Dark-netHoste
r; 1.86
Russian; 1.70
Leaks&Services;
1.70
Pe-dophile;
1.65
Asian; 0.85
Pornographie; 0.85
Hacker&Malicious; 0.80 Search Engines; 0.64Gambling; 0.53Arabic; 0.11
Other19%
Common59%
No Content22%
![Page 14: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/14.jpg)
ACTIVE DATA COLLECTION SYSTEM… OR KNOCK-KNOCK, DUDE!
![Page 15: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/15.jpg)
TRAFFIC INJECTION… YEP-YEP.
![Page 16: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/16.jpg)
TELL ME, WHO ARE YOU?
![Page 17: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/17.jpg)
SO DIFFERENT COOKIES
![Page 18: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/18.jpg)
![Page 19: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/19.jpg)
MEANWHILE, IN TOR BROWSER
![Page 20: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/20.jpg)
LET ME MEASURE YOUR TEXT
![Page 21: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/21.jpg)
GETBOUNDINGCLIENTRECT()
FONT VALUE
Impact 3409372Georgia 3344049Courier New 3430809Consolas 3392005MS Gothic 3383290
![Page 22: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/22.jpg)
“YEP-YEP, WE KNOW” – TOR PROJECT
![Page 23: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/23.jpg)
PROOF-OF-CONCEPT: PREPARING PATIENT
![Page 24: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/24.jpg)
PROOF-OF-CONCEPT: INJECT IT!
![Page 25: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/25.jpg)
PROOF-OF-CONCEPT: ANALYZE IT!
![Page 26: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/26.jpg)
XSS IS A PAIN OF ONION
![Page 27: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/27.jpg)
VECTOR OF ATTACK
![Page 28: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/28.jpg)
I KNOW YOU BY THE FONTS
![Page 29: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/29.jpg)
![Page 30: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/30.jpg)
![Page 31: The End of Anonymity on Anonymous Networks](https://reader035.vdocuments.us/reader035/viewer/2022062904/58800b431a28ab421b8b5cfb/html5/thumbnails/31.jpg)
THANK YOU! [email protected]@kaspersky.comhttp://twitter.com/difezza