RuhrSec 2016
2016-04-28..2016-04-29
Bochum, Germany
RuhrSec ·
[RuhrSec 2016, RuhrSec 2017, RuhrSec 2019, RuhrSec 2020 #StayAtHome Edition, RuhrSec 2023, RuhrSec 2025]
who it's for
web application security engineers, browser security researchers, exploit developers, incident responders and threat hunters, security researchers, devops and platform engineers
topics
AngularJS sandbox bypass techniques; sanitizer SVG parser bypass; CSP escape via Blob and Reflect.construct; DROWN SSLv2 Bleichenbacher attack; cross-protocol TLS decryption; JIT-ROP and code-reuse attacks; counterfeit object-oriented programming (COOP); hardware-assisted control-flow integrity; WebRTC signaling tampering and eavesdropping; Unicode utf8mb4 truncation vulnerabilities; honeypot-driven IOC extraction; automated clustering of malicious JavaScript
| title | author | length |
|---|---|---|
| An Abusive Relationship with AngularJS v2 | Mario Heiderich | 45m |
Deep dive into AngularJS 1.x vulnerabilities with concrete exploits and timelines: sandbox bypass via Function constructor and prototype/toString tricks… | ||
| The DROWN Attack | Sebastian Schinzel | 44m |
A cross‑protocol exploit uses an SSLv2 server as a Bleichenbacher RSA padding oracle to decrypt recorded TLS 1.2 sessions using 2048‑bit RSA, implemented to… | ||
| On Securing Legacy Software Against Code-Reuse Attacks | Lucas Vincenzo Davi | 35m |
Overview of concrete findings and defenses: fine-grained ASLR is undermined by a JIT-ROP that discloses about ~200 pages disclosed on average in… | ||
| Eavesdropping on WebRTC Communication with Funny Cat Pictures | Martin Johns | 39m |
Demonstrates a practical attack that turns browser JavaScript into a man-in-the-middle: a single Cross-site Scripting bug, a compromised signaling server, or a… | ||
| Hacking with Unicode in 2016 | Mathias Bynens | 46m |
Unicode has ~1.1M code points (up to 0x10FFFF) split into a 65k BMP and astral planes, and this causes concrete bugs: JavaScript counts astral symbols as two… | ||
| Automatic Extraction of Indicators of Compromise for Web App. | Marco Balduzzi | 37m |
Automated system extracts and validates web Indicators of Compromise by instrumenting a high-interaction honeypot of 500 vulnerable domains, diffing VM… | ||
| Keynote: Code-Reuse Attacks and Beyond | Prof. Dr. Thorsten Holz | 47m |
Code-reuse research shows that many defenses fail against practical techniques that reuse existing functions or manipulate object layouts rather than code… | ||
| nothing matches | ||