Reflected File Download - A New Web Attack Vector
summary
Claims a new web vector that lets attackers craft URLs that download without upload from sites like Google or Bing, produce a file named via path parameters (example setup.bat), and include Windows shell commands (double-pipe OR trick) so one click runs calc or PowerShell with no warnings on many configurations. Demo builds a cross‑social‑network worm, uses Chrome command‑line switches (disable‑web‑security, disable‑popup‑blocking) and succeeds across browsers in the lab.
AI-written summary · about
chapters (20)
- 0:00Introduction to RFD
- 1:30Background and context
- 3:34Agenda and objectives
- 5:12About the researcher
- 7:22Live demo of attack
- 10:25Analyzing the attack flow
- 11:52Trust model exploitation
- 14:46User trust survey results
- 18:07Vulnerability technical details
- 20:44Bypassing protections
- 25:03File name control
- 27:33Bypassing security warnings
- 29:16Identifying RFD vulnerabilities
- 32:44Forcing file downloads
- 34:15Advanced exploitation
- 37:09Gmail cookie theft demo
- 39:02The RFD worm
- 42:27Mitigation and defense
- 45:21Conclusion and Q&A
- 46:39Detailed audience questions
related talks
44mWhen you can't afford 0days: Client-side exploitation for the masses
01h 03mEffects Malware hunting in Cloud environment
44mAnatomy and Defense of LOTL Fileless Intrusions
59mBrowsers Gone Wild
34m"The magic of XSS - not only in web applications"
52mRansomware 101: Get Smart Understanding Real Attacks
48mA Weakness In Chrome & A New Hacking Technique
41mSideWinder Uncoils to Strike