Esoteric Web Application Vulnerabilities
summary
Demonstrates concrete exploits: noSQL injection via aggressive input decoding in Rails/MongoDB that lets attackers bypass token checks and complete registrations or reset arbitrary passwords when defaults are nil; host header callback hijack that makes Twilio fetch attacker-controlled URLs to steal 2FA audio; PayPal IPN double spend where merchants fail to verify receiver_email so attacker’s valid PayPal IPN makes the merchant mark orders paid while funds go to attacker; shows Rails ActiveSupport MessageVerifier RCE from weak secrets and recommends long random secrets and JSON serializer.
AI-written summary · about
chapters (14)
- 0:00Introduction
- 1:03Why is sequel injection dying
- 3:45Aggressive input decoding
- 10:30Host header injection
- 18:10Password reset token validation
- 25:16IP and Handler
- 26:33How it works
- 28:23Peoples IP
- 30:31Verification
- 31:45Attack
- 33:46Owner
- 38:38Ruby on Rails
- 43:46Solution
- 45:03Conclusion
