Task 1 GroupIB recruiting

Francisco Javier Espinosa Pineda
Task 1: Description and Analysis of the Collection Data Scripts
This is the report for the analysis of requested demo site with URL: http://fh-demo-site.groupib.com/, in order to make an identification of scripts that are meant to collect user data and be
sent to a remote server through GET/POST methods, following are the descriptions of the
scripts that are in charge of doing this tasks:
1.- Identification of the script
The script in charge of collecting the user data is the sb.js which initially only gets the next
parameters identified through the object navigator which basically gets only the data of the
browser used to visit the website through the UserAgent property, as seen in the next
visualization of the console debbuger:
2.- Identification of the method to pass the parameters collected
It can be seen in the console that all are XMLHttpRequests that the sb.js script passes the
parameters through a POST request:
The parameters passed are the next ones, including the “User-Agent” parameter which
contains the data collected from the user:
3 & 4.- identification of the server and the state of the script
As per the previously analysis performed, we can see that all parameters are sent to the
sbbe.group-ib.ru server and it looks like the script doesn’t change as time passes, it only keeps
sending the same information repeatedly.