One File, Many Meanings - Experiments with Polyglots
summary
The talk examines files whose byte sequences satisfy multiple file-format specifications at once (polyglots). It explains what a file and a file format are, shows examples of polyglot files, and discusses uses such as attacking applications, hiding data, surprising others, and designing data formats that resist abuse.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 8:12GIF-JAR polyglot example
- 15:39ZIP format flexibility
- 21:43Word and APK polyglot
- 26:40PDF polyglots
- 33:29File analysis tools
- 39:45Format availability
- 46:28Personal format experiences
- 49:38Summary and Q&A
related talks
17mB · o · B, a universal & secure file-transfer software in OCaml
56mUnicode - going down the rabbit hole
11mReverse engineering game formats for fun and profit! (or just fun)
06mWhat's My Object?
58mStegospolit - Exploit Delivery With Steganography and Polyglots
48mWeird Machines: Exploiting Turing-Completeness
32mSubstructural Information Flow via Polymorphism
26mExposing Hidden Exploitable Behaviors In Programming Languages Using Differential Fuzzing