Exploiting Unknown Browsers and Objects
Talkat OWASP AppSec Europe 2018 · on Friday, 2018-07-06· at 13:30· Fleming - 3rd Floor, QEII Centre Broad Sanctuary, Westminster·
summary
A tool called Hackability inspector enumerates hidden JavaScript objects in embedded browsers and runs concrete tests it finds cross-domain window detection, function constructor checks, HTML object rendering and a blind enumeration mode that saves results for offline analysis. It detects Java bridges, attempts socket creation and uses getClass/field manipulation to achieve remote code execution via Java bridge, reproduces bugs like location.host overwrites and origin leaks in exceptions, and produces working proofs of concept such as calculator popups.
AI-written summary · about
chapters (18)
- 0:00Intro
- 1:55About me
- 2:53Hackability
- 5:17Missing browser devtools
- 5:48New tool
- 6:30Introducing Inspector
- 7:57Inspecting HTML
- 8:20Filter objects
- 9:17Detecting JS windows
- 10:36Detecting Function/Object
- 14:44Security bugs
- 21:31Security tests
- 26:09Detecting Java bridges
- 27:40Exploiting Java bridges
- 32:54Advanced Inspection
- 34:21Use cases
- 34:58Shortcuts and commands
- 35:37Conclusion
related talks
40mHostile JavaScript: Attacking and Defending the Browser
36mHTML5 JS Security
33mOffensive Javascript Techniques for Red Teamers
35mServer-Side Browsers: Exploring the Web’s Hidden Attack Surface
44mHeadless Browser Hide and Seek
27mReverse-engineering JavaScript to get rid of trust issues
40mHow hacking works; Web edition
34mJS Security - A Pentesters Perspective