Attack of the CUPS and Exploiting Web Views via HSTS

Day[0]

Inhalt bereitgestellt von dayzerosec. Alle Podcast-Inhalte, einschließlich Episoden, Grafiken und Podcast-Beschreibungen, werden direkt von dayzerosec oder seinem Podcast-Plattformpartner hochgeladen und bereitgestellt. Wenn Sie glauben, dass jemand Ihr urheberrechtlich geschütztes Werk ohne Ihre Erlaubnis nutzt, können Sie dem hier beschriebenen Verfahren folgen https://de.player.fm/legal.

12M ago 1:08:09

MP3•Episode-Home

In this week's episode, we cover an attack utilizing HSTS for exploiting Android WebViews and abusing YouTube embeds in Google Slides for clickjacking. We also talk about the infamous CUPS attack, and the nuances that seem to be left behind in much of the discussion around it.

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/257.html

[00:00:00] Introduction

[00:01:30] Exploiting Android Client WebViews with Help from HSTS

[00:09:08] Using YouTube to steal your files

[00:18:43] Attacking UNIX Systems via CUPS, Part I

Podcast episodes are available on the usual podcast platforms:

-- Apple Podcasts: https://podcasts.apple.com/us/podcast/id1484046063

-- Spotify: https://open.spotify.com/show/4NKCxk8aPEuEFuHsEQ9Tdt

-- Google Podcasts: https://www.google.com/podcasts?feed=aHR0cHM6Ly9hbmNob3IuZm0vcy9hMTIxYTI0L3BvZGNhc3QvcnNz

-- Other audio platforms can be found at https://anchor.fm/dayzerosec

You can also join our discord: https://discord.gg/daTxTK9

282 Episoden

#Tech #dayzerosec