HTML5 - Something Wicked This Way Comes.pdf

(1023 KB) Pobierz
HTML5:
Something wicked this way comes
Krzysztof Kotowicz
Securing
1
About me
•
security researcher
•
pentester
•
IT security trainer
•
„Hacking HTML5”
•
HTML 5
•
UI redressing / clickjacking
•
xss-track, squid-imposter, ...
2
Plan
•
Same origin policy
•
Exploiting users
•
Attack gadgets
•
Wrap-up
3
Same origin policy
•
the single most important security
concept for the web
•
restricts communication between
•
has many flavors
•
without it
hell breaks loose
4
websites from different domains
Same origin policy
•
can be
relaxed
though
•
or
ignored...
•
crossdomain.xml
•
document.domain
•
HTML5 Cross Origin Resource Sharing
•
by exploiting users
•
UI redressing (clickjacking)
5

Plik z chomika:

Inne pliki z tego folderu:

Inne foldery tego chomika:

Zgłoś jeśli naruszono regulamin