The Top 10 Web Hacks of 2014

on YouTube ↗45m

" summary

Ten ranked exploits with concrete takeaways: heartbleed leaks TLS keys via a malformed heartbeat so operators must rotate certs; shellshock lets an unauthenticated HTTP header spawn a shell and masscan shows rapid global callbacks; residential routers yield RCE by overwriting cookie pointer and researchers build a hardware debugger called zordon debugger; Rosetta Flash uses Huffman-style mapping to force SWF via JSONP; reported counts show ~46 million devices with TR-069 port 7547 exposed.

AI-written summary · about

" chapters (8)

1. 0:00Introduction and methodology
2. 3:57Hacks 10 through 7
3. 7:33PayPal CSRF hack
4. 8:59Misfortune cookie exploit
5. 18:19Rosetta flash tool
6. 22:54Poodle vulnerability
7. 29:59Shellshock exploit
8. 35:15Heartbleed and conclusions

" related talks

• 47mTop 10 Web Hacking Techniques of 2013Johnathan Kuskos · OWASP AppSecUSA 2014
• 41mLive Hacking: Breaking into Your Web AppBrian Vermeer · GOTO Amsterdam 2022
• 30mHow to hack a web app?Asim Hussain · Render Conference 2018
• 50mPwnie Awards 2016Black Hat USA 2016
• 55mHow hacking worksEspen Sande-Larsen · NDC Security 2023
• 47mLive Hacking: Breaking into Your Web AppBrian Vermeer · Heapcon 2019
• 42m"Vulnerabilities from a grave. Forever dead or maybe alive..."Michał Sajdak · CONFidence 2019
• 01h 00mHack to the FutureTroy Hunt · NDC Sydney 2019