Exploiting Web Application Obscurity

No ratings

Presented at bsideslondon 2016 by

I'd like to present a talk and material on less frequently exploited vulnerabilities such as Formula Injection and CORS policies. The typical impact of Formula Injection is remote command execution. As for CORS, I would like to present the possibility of not just CSRF bypass, but also session hijacking attacks. (I applied and got accepted last year, but unfortunately couldn't get down to London for the event. I've now moved residence to London, and so this won't be an issue.)