When you can't afford 0days: Client-side exploitation for the masses
summary
Demonstrates concrete, zero‑day‑free client compromise: an automated Web Store uploader that publishes repackaged Chrome extensions which gain tab and Gmail control via declared permissions; a proof that a crafted page or Office document can drop PowerShell inline payloads and achieve persistence on fully patched Windows; use of a public phishing framework (Fishing Frenzy) to mass‑deliver customized lures; plus techniques to bypass SmartScreen/reputation checks and force dialog acceptance via keyboard‑shortcut abuse. All methods are implemented and shown working.
AI-written summary · about
chapters (11)
- 0:00Start
- 0:59outline
- 2:11why there is still hope without Odays?
- 3:44Exploiting Browser Extensions
- 8:26Exploiting Chrome Extensions
- 20:12Exploiting Firefox Extensions
- 23:40The good old HTA and office macros
- 32:28The good old HTA in PhishingFrenzy
- 33:08The good old HTA to break sitekiosk
- 33:53Abusing UI expectations on IEC
- 41:23Few words about Java Exploitation
related talks
48mHacking Exposed: Next-Generation Tactics, Techniques, and Procedures
58mExploiting web messaging implementations
43mAttacking Modern Web Technologies
42mModern web application bugs
41mThinking Outside the Sandbox - Violating Trust Boundaries in Uncommon Ways
48mA Weakness In Chrome & A New Hacking Technique
34m"The magic of XSS - not only in web applications"
25mBack To The Future: Old Tricks Invading A New Attack Surface