Video: Attacking XML preprocessing
Posted on 26 June 2012.
Documenting more than a year of research in XML technologies, this talk by Nicolas Grégoire at Hack in The Box 2012 Amsterdam details security implications of the XML format and its processing practices.

Discussed targets range from browsers to enterprise-level security solutions and web-service back-ends. Several key technologies will be addressed: XML grammar aka DTD, homo-iconicity and self-contained dynamic SVG images, design and implementation vulnerabilities in XSLT and XPath engines, in-memory exploitation of Java-based XSLT engines, XML databases and more. PoC code has and will systematically be released for every (patched) vulnerability.

The goal of this presentation is to document and publicize state of the art attacks including:
  • Data obfuscation in XML containers (Adobe, VLC, ...)
  • DTD manipulation used to read (possibly binary) files, steal hashes or generate XSS
  • Dangerous extensions in newly studied XSLT and XQuery engines (Adobe, Oracle, XT, 4Suite, ...)
  • Grammar and mutation-based fuzzing of XPath and XSLT engines
  • Bizarre combination of grammar, data, code and markup in a single XML file
  • How to trigger XSLT code in security protocols (SAML, WS-Security, ...)
  • Advanced in-memory exploitation of Java based XSLT engines.





Spotlight

New Zeus variant targets users of 150 banks

Posted on 19 December 2014.  |  A new variant of the infamous Zeus banking and information-stealing Trojan has been created to target the users of over 150 different banks and 20 payment systems in 15 countries, including the UK, the US, Russia, Spain and Japan.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  
DON'T
MISS

Mon, Dec 22nd
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //