목록전체 글 110
strangerRidingCaml
Browser Plug-in Exploitation Lecture: Identifying and exploiting vulnerabilities in browser plugins/extensions. : This lecture will focus on the identification and exploitation of vulnerabilities present in browser plugins and extensions. Browser plugins and extensions are commonly used to enhance the functionality of web browsers, but they can also introduce security risks if not ..
Cross-Site Request Forgery CSRF Lecture: Exploring CSRF attacks and browser-specific considerations. : In this lecture, we will delve into the world of Cross-Site Request Forgery CSRF attacks, exploring their underlying mechanisms and potential impact on web application security. CSRF attacks occur when an attacker tricks a user into performing unintended actions on a web appli..
Cross-Site Scripting XSS Lecture: Understanding XSS attacks and variations in different browsers. : XSS attacks are a prevalent type of security vulnerability in web applications. In this lecture, we will delve into the intricacies of XSS attacks, understanding their underlying mechanisms and the potential impact on web application security. We will explore the var..
Introduction to Browser Security and Setup Lecture: Overview of web security threats and browser architecture. : In this lecture, we will delve into the intricate world of web security, exploring the various threats that modern web applications face. We will start by understanding the fundamental principles of web security, including the concept of the attack surface and the import..
Bypassing Kernel Self-Protection MechanismsKernel self-protection mechanisms are security features implemented in modern operating systems to prevent and mitigate kernel-level attacks. However, skilled attackers may attempt to bypass these mechanisms to execute malicious code in the kernel.Lab Activity: Bypassing Kernel Self-Protection MechanismsIn this lab activity, we'll demonstrate bypassing ..
Segregation of Kernel Memory from Userspace MemorySegregation of kernel memory from userspace memory is a security feature implemented in modern operating systems, including x86's Supervisor Mode Execution Protection SMEP, Supervisor Mode Access Prevention SMAP, and ARM's Privileged eXecute Never PXN and Privileged Access Never PAN. These features prevent the execution of code from users..