Blind XSS
Adam Baldwin details copy of the slides for this talk are here: Blind XSS Adam "EvilPacket" Baldwin Chief Security Officer, & yet.
Summary
Architecture and Background
Copy of the slides for this talk are here: Blind XSS Adam "EvilPacket" Baldwin Chief Security Officer, & yet. This talk will announce the release and demonstrate the xss.io toolkit.
Vulnerability Analysis
xss.io is a platform to help ease cross-site scripting (xss) exploitation and specifically for this talk identification of blind xss vectors. Think drag and drop exploits post xss vuln identification.
Exploitation and Demonstrations
For blind xss, xss.io is a callback and hook manager for intel collected by executed and non-executed but accessed payloads. Adam "EvilPacket" Baldwin Adam Baldwin has over 10+ years of mostly self-taught computer security experience and currently is the Chief Security Officer at & yet.
Remediation and Defensive Strategies
He at one time possessed a GCIA and if his CPE's are up to date should still have a CISSP. Prior to starting at & yet, Adam operated a security consultancy, nGenuity and worked for Symantec. Adam is a minor contributor to the W3AF project, creator of the DVCS pillaging toolkit, helmet: the security header middleware for node.js, and has previously spoken at DEF CON, Toorcon, Toorcamp, Djangcon, and JSconf. Twitter: @adam_baldwin
Related talks
Main Stage·35 min
Vangelis Stykas
Vangelis Stykas demonstrates how typical web application flaws in abandoned malware C2 infrastructure allow researchers to compromise admin panels and identify threat actors.
Main Stage·36 min
regilero
regilero demystifies HTTP request smuggling techniques, illustrating how desynchronizing reverse proxies and backend web servers leads to cache poisoning and filter bypasses.
Main Stage·45 min
Bryant Zadegan · Ryan Lester
Bryant Zadegan and Ryan Lester show how modern web standards like Service Workers and Content Security Policy headers can be subverted for client-side persistence.