Completed
Intro
Class Central Classrooms beta
YouTube videos curated by Class Central.
Classroom Contents
Cross-Site Escape - Pwning macOS Safari Sandbox the Unusual Way
Automatically move to the next video in the Classroom when playback concludes
- 1 Intro
- 2 Comparation
- 3 TOCTOU Without Racing
- 4 Web Content Case Study
- 5 Timeline for Web Content
- 6 Dashboard Widgets
- 7 Turning to Arbitrary Widget installation
- 8 Sandbox Escape
- 9 Problems
- 10 Triggering Execution
- 11 Hard Coded Trusted Schemes
- 12 Legacy Help
- 13 Sandbox is...gone
- 14 (Failed) Local File Disclosure
- 15 Some Drama
- 16 CVE-2020-9979: We Got Trust Issue
- 17 Dictionary App
- 18 Arbitrary File Execution
- 19 Local File Execution
- 20 How do we jump to Dictionary?
- 21 Jump to Dictionary.app
- 22 Summary
- 23 Takeaways
