2019-05-19

[public] 83.0K views, 3.62K likes, 50.0 dislikes audio only

LiveOverflow

The start of a new series. We will try to learn some basics about Browser Exploitation.

blog: https://liveoverflow.com/getting-into-browser-exploitation-new-series-introduction-browser-0x00/

-=[ 🕴️Advertisement ]=-

This video is supported by SSD Secure Disclosure: https://ssd-disclosure.com/

Offensive Security Conference TyphoonCon (10th - 14th June 2019): https://typhooncon.com/

-=[ 🗄️ References ]=-

Linus's Exploit: https://github.com/LinusHenze/WebKit-RegEx-Exploit

Niklas's Exploit: https://github.com/niklasb/sploits/blob/master/safari/regexp-uxss.html

ZDI's Blog: https://www.zerodayinitiative.com/blog/2019/3/14/the-apple-bug-that-fell-near-the-webkit-tree

Saelo's german class: https://www.youtube.com/watch?v=1RLt7yscBZc

Saelo's Attacking JavaScript Engines: http://www.phrack.org/papers/attacking_javascript_engines.html

ret2system's blog: http://blog.ret2.io/2018/06/05/pwn2own-2018-exploit-development/

-=[ ❤️ Support ]=-

→ per Video: https://www.patreon.com/join/liveoverflow

→ per Month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join

-=[ 🔴 Stuff I use ]=-

→ Microphone:* https://geni.us/ntg3b

→ Graphics tablet:* https://geni.us/wacom-intuos

→ Camera#1 for streaming:* https://geni.us/sony-camera

→ Lens for streaming:* https://geni.us/sony-lense

→ Connect Camera#1 to PC:* https://geni.us/cam-link

→ Keyboard:* https://geni.us/mech-keyboard

→ Old Microphone:* https://geni.us/mic-at2020usb

US Store Front:* https://www.amazon.com/shop/liveoverflow

-=[ 🐕 Social ]=-

→ Twitter: https://twitter.com/LiveOverflow/

→ Website: https://liveoverflow.com/

→ Subreddit: https://www.reddit.com/r/LiveOverflow/

→ Facebook: https://www.facebook.com/LiveOverflow/

-=[ 📄 P.S. ]=-

All links with "*" are affiliate links.

LiveOverflow / Security Flag GmbH is part of the Amazon Affiliate Partner Programm.

#BrowserExploitation