Browsers Gone Wild
summary
Demonstrations show concrete, reproducible exploits: Punycode and Unicode emoji trick URLs (Unicode 7.8 adds ~250 emojis) that spoof the address bar in Safari, an iOS 7/8 URL-spoof bug (later fixed) that captures logins, multiple XSS filter bypasses using unclosed <script>, HTML imports and SVG/onload vectors that execute despite Chrome/IE protections, and data: URI malware that embeds a base64 EXE plus the HTML5 download attribute with auto-click to force downloads without a hosting server. Also shown: drag-out exe swap that replaces images with executables, Flash/clipboard reads without consent, and image-size/timing side channels (requestAnimationFrame + CSS filters) that detect logins and browsing history; demos run successfully on Chrome and IE11.
AI-written summary · about
chapters (10)
- 0:00Start
- 2:03Punycode Syntax Spoofing
- 10:32BROWSER XSS FILTERS
- 26:36DATA URI - Craft the Payload
- 36:56CLIPBOARD GONE WILD
- 39:16CLIPBOARD // Flash
- 42:23CLIPBOARD // Recommendations
- 43:26LOGIN & HISTORY SIDE CHANNELS
- 43:50PRETTY PURPLE COLORS
- 52:12requestAnimation Frame Timing
