
Explore how pdfs, images, and links can hack web applications and how to assess their vulnerabilities. See demos of data theft via pdf, image-based attacks, and link redirection.
Demonstrate token hijacking via a malicious PDF upload that reads and exfiltrates a CSRF token from the user's profile using PDF scripting, illustrated in IE and Acrobat Reader.
Learn how token hijacking via a malicious pdf exfiltrates an authenticated user's csrf token and profile data using x form scripting, demonstrated with internet explorer and acrobat reader.
explore xss via image by examining ezgi graphic formats that can contain scripts, with a stored attack scenario demonstrated through uploading and visiting the image file.
Learn how uploading an image file containing a script enables xss in a web application. The demo shows sharing a link to trigger the attack against another user.
Demonstrate how tabnabbing via window.opener enables malicious redirection through ubiquitous links, with a step-by-step demo showing a link using target blank and overwriting the opener location, and discuss countermeasures.
Explore how window.opener tabnabbing enables user redirection and learn a simple countermeasure using rel=noopener to prevent opener hijacking in links with target=_blank.
User data is processed every single day by modern web applications. Think about PDFs, images, and links. They are everywhere. What’s more – they can be used to hack your web applications and obviously you don’t want that to happen.
In this course you will learn how your web applications can be hacked via PDFs, images, and links. You will also learn how to check if your web applications are vulnerable to these attacks. First, I’ll show you how an attacker can steal a user’s sensitive data via a PDF. Next, I’ll present how the attacker can launch an XSS attack via an image. Finally, I’ll demonstrate how the attacker can launch a user redirection attack via a link (using window.opener tabnabbing).
For every single attack there is a DEMO so that you can see, step-by-step, how these attacks work in practice. I hope this sounds good to you and I can’t wait to see you in the class.
Note: you can get paid for these bugs in bug bounty programs.