Workshop · 3

Malware in ads

The user clicked one ad. Everything after that click happened without them: the browser’s own records say how.

Written for Mutant v2.6.1. Every program and output on this page is that release’s own file.

Preview. This module is not published yet: it opens once every builtin it uses has cleared review at the pinned release.

beginner

The redirect chain

Walk Chrome’s visits back from the download, one from_visit at a time, and mark the hops a server sent.

  1. One click, many hops

    Current

    Malicious advertising rarely needs the user to do more than click. The ad network’s servers pass the browser along, hop by hop, until it lands on a download.

    Chrome records every one of those visits, and for each one, the visit that led to it.

  2. From one click to the browser’s records

    Locked

    Finish or skip the stage above to open this one.

  3. Visits, linked backwards

    Locked

    Finish or skip the stage above to open this one.

  4. Walk it with Mutant

    Locked

    Finish or skip the stage above to open this one.

  5. Build it

    Locked

    Finish or skip the stage above to open this one.

  6. Check yourself

    Locked

    Finish or skip the stage above to open this one.

intermediate

The cookie jar

Which sites left a cookie, and which of them the user never visited.

  1. Cookies without a visit

    Locked

    Finish or skip the stage above to open this one.

  2. Compare them with Mutant

    Locked

    Finish or skip the stage above to open this one.

  3. Build it

    Locked

    Finish or skip the stage above to open this one.

  4. Check yourself

    Locked

    Finish or skip the stage above to open this one.

  5. Run them yourself

    Locked

    Finish or skip the stage above to open this one.