This is the first of 3 parts of the document entitled: "JavaScript is just evil".
Here are the first 2 chapters.
1.- DoSing the browser
You wont learn anything new in this first chapter, is just a set of examples.
2.- Injecting code and tracing stack
Here we will see some attack vectors for chrome privilege escalation.
In them will demonstrate by several code examples, how JavaScript can be used for evil uses.
This started a while ago, when, while chatting with Giorgio Maone, and showing him an example that crashed Firefox (using intervals), he said as response.. "there's nothing we can do, javascript is just evil"..
The phrase "javascript is just evil" captivated me in such a way, that I started thinking in which ways javascript could be used for evil.
Now, I divided the document in 3 sections, and them divided into 5 chapters.
- DoSing the browser
- Injecting code and tracing stack
- XSS Worms
- DOM Level XSS
- Local Files Privileges and HTA's
JavaScript is just evil (for you).
JavaScript is just evil (for your server).
JavaScript is just evil (for your local files).
I hope you like them!
Interesting research. Some would plain call it the 'AOP features' of JavaScript - others might see grave security problems in relation to XSS ;)
ReplyDeleteI once installed a client side security monitor for a client which extended common XSS probing methods like alert and document.write with a JSOD based logging hence all client side application logic used console.log|dir for debugging purposes.
What I didn't know was how to monitor the changes of variable values - very interesting stuff!
Glad you liked it mario!
ReplyDeleteUnfortunately that's only available on firefox..
Greetz!!