asia-15-Prado-Browsers-Gone-Wild

More documents

Recommendations

Info

AGENDAProceed with caution:XSS Filter BypassData URI Ghost MalwareHistory Stealing RevisitedModern Login DetectionHTML5 Drag-Out MadnessURL address bar spoofingClipboard Stealing
Page 1: Angelo Prado, SalesforceXiaoran Wan
Page 8 and 9: http://org63.my.salesforce.xn--comh
Page 11: What if…
Page 15: ♥♥ Prado Emoji Ventures is now
Page 18 and 19: Apple Safari SSL on MDM iOS 7
Page 20 and 21: Data URI + HTML5 = Ghost MalwareDat
Page 22 and 23: Data URI + HTML5 = Ghost MalwareAn
Page 24 and 25: HTML5 Download AttributeHTML5 allow
Page 26 and 27: DATA URI - Craft the PayloadLet’s
Page 28 and 29: DATA URI - Craft the Payload• Let
Page 30 and 31: DATA URI - Browser SupportRedirecti
Page 32 and 33: « HTML5 Drag-Out Madness »
Page 34 and 35: Drag-Out // RFCNOT a RFC spec yetOn
Page 36 and 37: Drag-Out // AttackSweet spot to hid
Page 39 and 40: CLIPBOARD GONE WILD
Page 41 and 42: CLIPBOARD // clipboardDataJavaScrip
Page 43 and 44: CLIPBOARD // FlashFlash support acc
Page 45 and 46: CLIPBOARD // RecommendationsBrowser
Page 47 and 48: PRETTY PURPLE COLORSCSS History Ste
Page 49 and 50: « We have a long history ofignorin
Page 51 and 52: LOGIN & HISTORY SIDE CHANNELSEvent-
Page 53:
CSS WITH USER INTERACTIONFrom Micha
Page 56 and 57:
equestAnimationFrame TimingWe need
Page 58:
ATTACKER-DOMAIN.COMxiaoran@attacker
show all

asia-15-Prado-Browsers-Gone-Wild

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?