New Series: Getting Into Browser Exploitation - browser 0x00

New Series: Getting Into Browser Exploitation - browser 0x00

Channel:
United States LiveOverflow
Subscribers:
920,000
Published on ● Video Link: https://www.youtube.com/watch?v=5tEdSoZ3mmE


Duration: 9:46
97,794 views
3,606

The start of a new series. We will try to learn some basics about Browser Exploitation.

blog: https://liveoverflow.com/getting-into-browser-exploitation-new-series-introduction-browser-0x00/

-=[ πŸ•΄οΈAdvertisement ]=-

This video is supported by SSD Secure Disclosure: https://ssd-disclosure.com/
Offensive Security Conference TyphoonCon (10th - 14th June 2019): https://typhooncon.com/

-=[ πŸ—„οΈ References ]=-

Linus's Exploit: https://github.com/LinusHenze/WebKit-RegEx-Exploit
Niklas's Exploit: https://github.com/niklasb/sploits/blob/master/safari/regexp-uxss.html
ZDI's Blog: https://www.zerodayinitiative.com/blog/2019/3/14/the-apple-bug-that-fell-near-the-webkit-tree
Saelo's german class: https://www.youtube.com/watch?v=1RLt7yscBZc
Saelo's Attacking JavaScript Engines: http://www.phrack.org/papers/attacking_javascript_engines.html
ret2system's blog: http://blog.ret2.io/2018/06/05/pwn2own-2018-exploit-development/

-=[ ❀️ Support ]=-

β†’ per Video: https://www.patreon.com/join/liveoverflow
β†’ per Month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join

-=[ πŸ”΄ Stuff I use ]=-

β†’ Microphone:* https://geni.us/ntg3b
β†’ Graphics tablet:* https://geni.us/wacom-intuos
β†’ Camera#1 for streaming:* https://geni.us/sony-camera
β†’ Lens for streaming:* https://geni.us/sony-lense
β†’ Connect Camera#1 to PC:* https://geni.us/cam-link
β†’ Keyboard:* https://geni.us/mech-keyboard
β†’ Old Microphone:* https://geni.us/mic-at2020usb

US Store Front:* https://www.amazon.com/shop/liveoverflow

-=[ πŸ• Social ]=-

β†’ Twitter: https://twitter.com/LiveOverflow/
β†’ Website: https://liveoverflow.com/
β†’ Subreddit: https://www.reddit.com/r/LiveOverflow/
β†’ Facebook: https://www.facebook.com/LiveOverflow/

-=[ πŸ“„ P.S. ]=-

All links with "*" are affiliate links.
LiveOverflow / Security Flag GmbH is part of the Amazon Affiliate Partner Programm.

#BrowserExploitation



Other Videos By LiveOverflow


2019-07-07Speedrun Hacking Buffer Overflow - speedrun-001 DC27
2019-07-04YouTube BANNING Hacking Videos - Hot Take
2019-06-30Revisiting JavaScriptCore Internals: boxed vs. unboxed
2019-06-26Paste-Tastic! - Post Google CTF 2019 Stream
2019-06-23The fakeobj() Primitive: Turning an Address Leak into a Memory Corruption
2019-06-16Building an 8-Bit Computer From Scratch
2019-06-16WebKit RegExp Exploit addrof() walk-through
2019-06-09Just-in-time Compiler in JavaScriptCore (WebKit)
2019-06-02The Butterfly of JSObject
2019-05-26Hacking Browsers - Setup and Debug JavaScriptCore / WebKit
2019-05-19New Series: Getting Into Browser Exploitation - browser 0x00
2019-05-12The Origin of Script Kiddie - Hacker Etymology
2019-05-05Unpacking Redaman Malware & Basics of Self-Injection Packers - ft. OALabs
2019-04-28Business, Money, 300k Subscribers and What's Next
2019-04-21GitLab 11.4.7 Remote Code Execution - Real World CTF 2018
2019-04-14Fuzzing Browsers for weird XSS Vectors
2019-04-07How did Masato find the Google Search XSS?
2019-04-01[Live] Pen-Testing and Story Time
2019-03-31XSS on Google Search - Sanitizing HTML in The Client?
2019-03-24Weird Return-Oriented Programming Tutorial - bin 0x2A
2019-03-17Introducing Weird Machines: ROP Differently Explaining part 1 - bin 0x29


Tags:
Live Overflow
liveoverflow
hacking tutorial
how to hack
exploit tutorial
browser exploitation
jit
webkit
v8
javascriptcore
jsc
spidermonkey
chakra
saelo
javascript engine
advanced exploitation
memory corruption
jit compiler
heap overflow
dom
chrome
safari
edge
internet explorer
playstation 4
jailbreak
nintendo switch