CSS Keylogger - old is new again

Channel:
United States LiveOverflow
Subscribers:
921,000
Published on ● Video Link: https://www.youtube.com/watch?v=oJ6t7AImTdE


Category:
Vlog
Duration: 11:29
312,236 views
7,684

This is "well known" research that resurfaces every other year. Let me tell you a story how I have heard about this in 2012 and putting it into perspective.

Research "Scriptless Attacks –
Stealing the Pie Without Touching the Sill" (2012):
+ Paper: https://www.nds.rub.de/media/emma/veroeffentlichungen/2012/08/16/scriptlessAttacks-ccs2012.pdf
+ Slides: https://www.slideshare.net/x00mario/stealing-the-pie
+ Talk recording: https://channel9.msdn.com/Events/Blue-Hat-Security-Briefings/BlueHat-Security-Briefings-Fall-2012-Sessions/BH1203

CSS Keylogger: https://github.com/maxchehab/CSS-Keylogging
Stealing Data With CSS - Attack and Defense: https://www.mike-gualtieri.com/posts/stealing-data-with-css-attack-and-defense

Twitter:
+ https://twitter.com/0x6D6172696F
+ https://twitter.com/sirdarckcat
+ https://twitter.com/garethheyes
+ https://twitter.com/thornmaker
+ https://twitter.com/mlgualtieri

-=[ ❤️ Support ]=-

→ per Video: https://www.patreon.com/join/liveoverflow
→ per Month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join

-=[ 🐕 Social ]=-

→ Twitter: https://twitter.com/LiveOverflow/
→ Website: https://liveoverflow.com/
→ Subreddit: https://www.reddit.com/r/LiveOverflow/
→ Facebook: https://www.facebook.com/LiveOverflow/

-=[ 📄 P.S. ]=-

All links with "*" are affiliate links.
LiveOverflow / Security Flag GmbH is part of the Amazon Affiliate Partner Programm.

#SecurityResearch



Other Videos By LiveOverflow


2018-04-27[Live] 100.000 Subscriber
2018-04-20Custom Chromium Build to Reverse Engineer Pop-Under Trick
2018-04-13Sources and Sinks - Code Review Basics
2018-04-06The Secret step-by-step Guide to learn Hacking
2018-03-31Red vs. Blue: Pen-Testing Introduction
2018-03-30ey! Look for patterns
2018-03-23Fuzzing with radamsa - Short
2018-03-16Linear independence and GF(2) - 34C3 CTF software_update (crypto) part 2/2
2018-03-09Python code audit of a firmware update - 34C3 CTF software_update (crypto) part 1/2
2018-03-02Global variable Buffer Overflow to leak memory - 34C3 CTF readme_revenge (pwn)
2018-02-23CSS Keylogger - old is new again
2018-02-16STOP WASTING YOUR TIME AND LEARN MORE HACKING!
2018-02-10MMORPG Bot part 2 - Some thoughts on the data
2018-02-09MMORPG Bot Reverse Engineering and Tracking
2018-02-02heap0 exploit speedrun & weird ASCII string on the Heap - bin 0x28
2018-01-26Let’s play a game: what is the deadly bug here?
2018-01-19TROOPERS 17 Badge ft. BadgeWizard
2018-01-12Identifying UART and main() in an AVR firmware (ft. Zeta Two) part 1 - rhme2
2018-01-05Regular expression as Finite-state machine - Short
2017-12-29TROOPERS 17 - PacketWars solved with an iPhone
2017-12-22Searching for Bitcoins in GitHub repositories with Google BigQuery


Tags:
Live Overflow
liveoverflow
hacking tutorial
how to hack
exploit tutorial
css keylogger
css attack
css hacks
attribute selector
abusing
exploiting
exploit css
abuse css
style
style tag
abuse html style
html style
steal password
steal data
.mario
scriptlessattack
css injection
html injection
js injection
javascript injection
xss
sirdarckcat
garethheyes
thornmaker
Blue-Hat
security research
html tricks
css hacking
stylesheet
style-sheet