Ghosts in the Browser: Backdooring with service workers

No ratings

Presented at Kiwicon20138AD 2018 by

Claudio Law

Service workers are all the rage for progressive web apps nowadays. This talk will take a look at Service Workers from a different perspective. We'll talk about ways to abuse them by exploiting XSS issues. We'll cover how to create a pseudo browser backdoor with service workers as well as some of its limitations. The talk will include demos as demonstration of the attacks, and will introduce various defence mechanisms against them.