ElectroVolt: Pwning Popular Desktop Apps While Uncovering New Attack Surface on Electron скачать в хорошем качестве

ElectroVolt: Pwning Popular Desktop Apps While Uncovering New Attack Surface on Electron

Electron based apps are becoming a norm these days as it allows encapsulating web applications into a desktop app which is rendered using chromium. However, if Electron apps load remote content of attackers choice either via feature or misconfiguration of Deep Link or Open redirect or XSS it would lead to Remote Code Execution.Previously, it was known that lack of certain feature flags and inefficiency to apply best practices would cause this behavior but we have identified novel attack vectors within the core electron framework which could be leveraged to gain remote code execution on Electron apps despite the feature flags being set correctly under certain circumstances.This presentation covers the vulnerabilities found in twenty commonly used Electron applications and gained Remote Code Execution within apps such as Discord, Teams (local file read), VSCode, Basecamp, Mattermost, Element, Notion, and others. By: William Bowling , Max Garrett , Aaditya Purani , Mohan Sri Rama Krishna Pedhapati Full Abstract & Presentation Materials: https://www.blackhat.com/us-22/briefi...