A look at how hackers use JS

on YouTube ↗53m

" summary

Covers how attackers leverage JavaScript/ECMAScript features to discover and exploit vulnerabilities beyond classic XSS. Presents concrete examples and demos of automated vulnerability discovery, attacks on endpoints and implementations, and ways JS can be used to compromise users and servers.

AI-written summary · about

" chapters (12)

1. 0:00Start
2. 7:34MUTATION WHAT?
3. 16:36THE PERILS OF SERVER SIDE USER CODE
4. 18:38SERVER SIDE JS INJECTION SPOT THE BUG
5. 23:54DEMO: REMOTE CODE EXECUTION
6. 25:30CS: CODE EXECUTION USING JAVASCRIPT IN A DESKTOP APP
7. 27:48CS: RCE VIA COMMAND LINE ARGS IN EXODUS WALLET
8. 31:17COMMON BYPASSES
9. 33:32JS WEIRDNESS (FOR ATTACKERS)
10. 35:42BREAKING FILTERS/WAFS
11. 37:04MALWARE AND THE INTERNET
12. 40:12CS: DRIVE BY DOWNLOADS

" related talks

• 55m6 Ways to Hack Your JavaScript ApplicationViktor Turskiy · JS Fest 2019 Spring
• 40mHostile JavaScript: Attacking and Defending the BrowserTodd H. Gardner · NDC London 2023
• 34mJS Security - A Pentesters PerspectivePrasanna Kanagasabei · JSConf.Asia 2015
• 23mJavaScript attack surfaceDavit Karapetyan · JavaScript Summit Armenia 2023
• 32mWriting Secure JavaScript CodeGuy Podjarny · View Source 2017
• 35mInside a hacker’s mindMaria Shoaib · Øredev 2019
• 27mBeyond the Basics: Securing JavaScript ApplicationsJoshua Arvin Lat · XtremeJS 2023
• 28mOffensive and Defensive Strategies for Client-Side JS SecurityAnand Vemuri · JSConf Budapest 2016