Completed
Intro
Class Central Classrooms beta
YouTube videos curated by Class Central.
Classroom Contents
Reflected File Download - A New Web Attack Vector
Automatically move to the next video in the Classroom when playback concludes
- 1 Intro
- 2 Las Vegas
- 3 Security conferences
- 4 Introduction
- 5 Agenda
- 6 About Me
- 7 Windows Calculator
- 8 What Happened
- 9 Why Reflected File Download
- 10 How Do We Trust Downloads
- 11 Conclusion
- 12 What is RFD
- 13 Download Reflected File
- 14 Final Result
- 15 Warning
- 16 Windows Security Feature Bypass
- 17 Batch File Bypass
- 18 Final Link
- 19 Example
- 20 Requirements
- 21 Where can we find it
- 22 Which exploit to use
- 23 Why work hard
- 24 Whitepaper
- 25 Advanced exploitation
- 26 PowerShell
- 27 Commandline Options
- 28 Chrome Setup
- 29 Build Exploit
- 30 Demo
- 31 Gmail
- 32 Verify download
- 33 Read emails
- 34 Cross social network warm
- 35 Cross social network warm demo
- 36 Googlecom warm demo
- 37 Use exact URL mappings
- 38 Whitelist callbacks
- 39 Remove support for path parameters
- 40 Summary
- 41 Quote
- 42 Questions
