Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

Offensive Javascript Techniques for Red Teamers

Security BSides San Francisco via YouTube

Overview

Explore offensive JavaScript techniques for red teamers in this 33-minute conference talk from BSidesSF 2019. Delve into advanced methods for crafting JavaScript payloads that target internal network vulnerabilities with unprecedented speed. Learn about new reconnaissance techniques traditionally used post-malware implant that can now be applied pre-implant to gain network footholds from a browser. Examine real-world examples of external payloads targeting internal assets at major companies, and understand the process of responsible disclosure for intranet-facing bugs. Topics covered include the Lobster Security Fallacy, browser exploitation limitations, Netflix Singularity, Service Workers, and building an attack portfolio. Gain insights into cutting-edge AppSec strategies that go beyond pre-exploitation, challenging conventional norms in cybersecurity.

Syllabus

Intro
Lobster Security Fallacy
Browser Exploitation
Limitations
Netflix
Singularity
RealWorld Examples
GeoCD Example
Bug Bounty Example
Service Workers
Attack Portfolio
Outro

Taught by

Security BSides San Francisco

Reviews

Start your review of Offensive Javascript Techniques for Red Teamers

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.