PDF - Mess With The Web
summary
Demonstrates concrete, working attacks: goToE JavaScript open action and URI actions execute script in the embedding page; FormCalc GET function issues authenticated requests and can exfiltrate same‑origin CSRF tokens and cookies; XML/XSLT parsing enables XXE/local‑file reads when PDFs load from disk. Demos run against the Adobe plugin/Reader and successfully steal content. Mitigations: host uploads on another origin and disallow embedding via a restricting response header, or disable PDF scripting/enable protected view.
AI-written summary · about
chapters (6)
- 0:00Start
- 3:42Route Object
- 4:00Alternative Actions
- 6:23Signed Documents
- 10:14The Phone Call Specification
- 17:29External Entity Attacks
related talks
01h 06mPDF Attack: A Journey from the Exploit Kit to the Shellcode (Part 2/2)
49mPDF Attack: A Journey from the Exploit Kit to the Shellcode (Part 1/2)
44mHow to Break PDF Encryption
37mAbusing Adobe Reader’s JavaScript APIs
30mWrangle PDFs on the web like a pro
01h 03mEffects Malware hunting in Cloud environment
33mHacking The Front-End
40mHostile JavaScript: Attacking and Defending the Browser