"The magic of XSS - not only in web applications"

on YouTube ↗34m

" summary

Demonstrates a real Google Hangouts Chat flaw where an open redirect chain to attacker-controlled domain plus missing address bar lets a link load attacker content; Electron’s quirk that an about:blank window inherits node integration turns DOM script into full remote code execution (demo opens calculator via child_process). Also finds Portal weaknesses: it ignores X-Frame-Options and allows same-origin bypass to run script in accounts.google.com and read file:// and chrome://, plus a surprising port-scan via unload event counts and a download-flood bypass.

AI-written summary · about

" chapters (9)

1. 0:00Start
2. 1:14Example of Xss
3. 1:49Electron
4. 6:11Web Application Vulnerability That Is Called Open Redirect
5. 9:02Google Open Url Redirection
6. 11:37Where Is the Magic of Xss
7. 22:08Portal Playground
8. 27:41Port Scanning
9. 29:58Port Scan

" related talks

• 33mXXSS: Exotic Cross-Site Scripting vectorsBenedek Gagyi · RuhrJS 2019
• 23mJavaScript attack surfaceDavit Karapetyan · JavaScript Summit Armenia 2023
• 39mElectron - Build cross platform desktop XSS, it’s easier than you thinkYosuke Hasegawa · CODE BLUE 2016
• 50mModern WebApp VulnerabilitiesErlend Oftedal · Øredev 2019
• 42mModern web application bugsErlend Oftedal · NDC Sydney 2018
• 40mXXSS: Exotic Cross-Site Scripting vectorsBenedek Gagyi · Øredev 2019
• 41mXSS Horror ShowGareth Heyes · OWASP AppSec Research (AppSecEU) 2015
• 34mJS Security - A Pentesters PerspectivePrasanna Kanagasabei · JSConf.Asia 2015