magecartskimmerPOC

Proof of concept for Darknet Diaries report on Magecart Skimmer

Steps to use (no server needed)

1. Place all file into one directory.

2. visitin index page

3. Fill out forms as if you were checking out

4. Check out

5. Investigate

Steps to use (with simple python server)

go into ccserver folder

1. setup python (3.6)

2. install depencies for environment with "pip install -r reqs.txt"

go into website directory

1. visitin index page

2. Fill out forms as if you were checking out

3. Check out

4. Investigate

Educational Beneits

Host-based signatures - depending how on how the malcious javascript is implemented and the Content Delivery Network compromised, host artifacts can be affected