Hacking Playable Ads: What REALLY are they?
summary
Examines real experiments intercepting Unity-based mobile ads over HTTPS using mitmproxy on a Raspberry Pi, reads auction JSON and mraid responses, and replaces image assets and playable-ad HTML by rewriting URLs; finds video blobs resist simple substitution (headers, lengths, checksums), manages a five-second replacement video in one case but often gets black screens, and demonstrates changing icons and timers by editing the auction payload.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 0:55I dont like ads
- 3:00Why am I here
- 4:25Why not use an ad blocker
- 5:30What am I trying to accomplish
- 6:33Set a scope
- 8:50Man in the middle
- 15:32What we do
- 17:39Investigating more requests
- 21:59Conclusion
related talks
46mPlayable Ads: What REALLY are they?
16mBeyond the surface: uncovering hidden threats in online ads
45mI just hacked your app!
45mReverse engineering mobile apps: how, why, and what now?
36mI just hacked your app!
21mThink outside the server
55mModern Malvertising ...
17mSidewinder Targeted Attack Against Android in the Golden Age of Ad Libs