Hackers of India

Innovative Approaches to Exploit Delivery

 Saumil Shah 

2012/10/10


Presentation Material

Abstract

Behind every successful exploit is a good delivery mechanism. This talk combines my research in exploit writing, browser and PDF exploitation, web hacking and old school data representation techniques, bringing you a slew of creative and innovative tricks and techniques to send exploits successfully to the victim’s doorstep. Never before has the fine art of packaging been more important when it comes to exploit delivery. Advances in HTML standards, newer trends with HTTP, new techniques of consuming web resources and multiple ways of data representation make it possible to come up with tricks like “Javascript chameleons”, “shortened exploits”, “exploitation by painting” and other creative techniques. As usual, we shall have interesting demos, rants, sarcasm, heckling and the occasional intelligent debate!