DEFCON 18: How I Met Your Girlfriend 2/3

Speaker: Samy Kamkar


How I Met Your Girlfriend: The discovery and execution of entirely new classes of Web attacks in order to meet your girlfriend.

This includes newly discovered attacks including HTML5 client-side XSS (without XSS hitting the server!), PHP session hijacking and random numbers (accurately guessing PHP session cookies), browser protocol confusion (turning a browser into an SMTP server), firewall and NAT penetration via Javascript (turning your router against you), remote iPhone Google Maps hijacking (iPhone penetration combined with HTTP man-in-the-middle), extracting extremely accurate geolocation information from a Web browser (not using IP geolocation), and more.

For presentations, whitepapers or audio version of the Defcon 18 presentations visit: http://defcon.org/html/links/dc-archives/dc-18-archive.html

Category:

Science & Technology

Tags:

• 10
• defcon
• 131
• clip2

[philds391]

@canucks16 Can you ask the people in the back to shut up?

[jcald89]

@goten1201 Running the web server on 6667 is required so that the router assumes that the web server is an IRC server. Read the slide at 8:10. This is not "best practices", this is hacking.

[Leeroooy]

teeeeerrrriiiblleeeeeee speaker...

[Amaury400]

because talking to her would have been too hard

[conemen1]

@TheSchmuck2 Hell yes that movie

[Blistio11]

NAT is acctualy a PAT on crack :P

[VerifyVolatile]

@MrDiggity1986 No, because he doesn't perform anything illegal. He simply shows you the draft of how to do something illegal.

[MrDiggity1986]

I don't wanna be that guy, but isn't this to an extent admission of guilt in performing something something illegal?

[Zenwtf]

Whats with all the massage videos?

[TheSchmuck2]

hahaha Hackers movie references at 6:22

[TheLepec93]

I just liked the video; he probably has all my information now.

[ImCapn]

Oh god, he's a /b/tard.