![Who am I? ,[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/ajaxsecurity-12695072945114-phpapp01/75/ajax-security-2-2048.jpg?cb=1668464514)
![Agenda ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/ajaxsecurity-12695072945114-phpapp01/75/ajax-security-3-2048.jpg?cb=1668464514)
![Introduction ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/ajaxsecurity-12695072945114-phpapp01/75/ajax-security-4-2048.jpg?cb=1668464514)
![Ajax Components (cont.) ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/ajaxsecurity-12695072945114-phpapp01/75/ajax-security-5-2048.jpg?cb=1668464514)
![Ajax Components ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/ajaxsecurity-12695072945114-phpapp01/75/ajax-security-6-2048.jpg?cb=1668464514)
![Let’s define Ajax: ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/ajaxsecurity-12695072945114-phpapp01/75/ajax-security-8-2048.jpg?cb=1668464514)
![Why Ajax is used? ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/ajaxsecurity-12695072945114-phpapp01/75/ajax-security-12-2048.jpg?cb=1668464514)
![Let’s talk about Ajax and security… ,[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/ajaxsecurity-12695072945114-phpapp01/75/ajax-security-14-2048.jpg?cb=1668464514)
![Ajax and Security – Server of origin policy ,[object Object],URLs Cross – Scripting allowed? Comments http://www.example.com:8080/script1.js No Port number doesn’t match. http://www.example.com/script2.js http://www.example.com/script1.js No Protocol type doesn’t match. https://www.example.com/script2.js http://www.example.com/script1.js No Browser will not perform domain name resolution. http://192.168.0.10/script2.js http://sub.example.com/script1.js No Subdomains treated as separate domains. http://www.example.com/script2.js http://www.example.com/hello/script1.js YES Domain name is the same. http://www.example.com/bye/script.2.js http://www.example2.com/script1.js NO Different domain names. http://www.example1.com/script2.js](https://image.slidesharecdn.com/ajaxsecurity-12695072945114-phpapp01/75/ajax-security-15-2048.jpg?cb=1668464514)
![Ajax and Security – Server of origin policy ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/ajaxsecurity-12695072945114-phpapp01/75/ajax-security-16-2048.jpg?cb=1668464514)
![Real attacks examples ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/ajaxsecurity-12695072945114-phpapp01/75/ajax-security-17-2048.jpg?cb=1668464514)
![Ajax Security – Case Study – Samy worm ,[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/ajaxsecurity-12695072945114-phpapp01/75/ajax-security-18-2048.jpg?cb=1668464514)
![Ajax – Case Study – Samy worm (cont) ,[object Object]](https://image.slidesharecdn.com/ajaxsecurity-12695072945114-phpapp01/75/ajax-security-19-2048.jpg?cb=1668464514)
![Ajax – Case Study – Samy worm ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/ajaxsecurity-12695072945114-phpapp01/75/ajax-security-22-2048.jpg?cb=1668464514)
![Ajax – Case Study – Yamanner worm ,[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/ajaxsecurity-12695072945114-phpapp01/75/ajax-security-23-2048.jpg?cb=1668464514)
![Ajax – Case Study – Yamanner worm ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/ajaxsecurity-12695072945114-phpapp01/75/ajax-security-24-2048.jpg?cb=1668464514)
![Ajax – Case Study – Nduja - Webmail XSS worm ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/ajaxsecurity-12695072945114-phpapp01/75/ajax-security-25-2048.jpg?cb=1668464514)
![Ajax Security – Case Study – Nduja - Webmail XSS Worm ,[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/ajaxsecurity-12695072945114-phpapp01/75/ajax-security-26-2048.jpg?cb=1668464514)
![Questions/Conclusion ,[object Object],[object Object]](https://image.slidesharecdn.com/ajaxsecurity-12695072945114-phpapp01/75/ajax-security-29-2048.jpg?cb=1668464514)
![References – Misc. ,[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/ajaxsecurity-12695072945114-phpapp01/75/ajax-security-30-2048.jpg?cb=1668464514)
![References – Misc. ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/ajaxsecurity-12695072945114-phpapp01/75/ajax-security-31-2048.jpg?cb=1668464514)
![References – Books ,[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/ajaxsecurity-12695072945114-phpapp01/75/ajax-security-32-2048.jpg?cb=1668464514)
![Table of Figures ,[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/ajaxsecurity-12695072945114-phpapp01/75/ajax-security-33-2048.jpg?cb=1668464514)
Ajax Security
•1 like•1,970 views
Report
Share
Download to read offline
This talk highlights potential attacks against web application using Ajax and XHR technology. The first part of the talk introduces Ajax and related technologies. Second part of the talk focuses on potential attacks and consequences, including some scenario where SOP (Same of origin) policy is bypassed.
More Related Content
What's hot
What's hot (20)
Viewers also liked
Viewers also liked (20)
Similar to Ajax Security
![Hacking Web 2.0 - Defending Ajax and Web Services [HITB 2007 Dubai]](https://cdn.slidesharecdn.com/ss_thumbnails/hacking-web-20-defending-ajax-and-web-services-hitb-2007-dubai-25117-thumbnail.jpg?width=384&fit=bounds)
Similar to Ajax Security (20)
![Hacking Web 2.0 - Defending Ajax and Web Services [HITB 2007 Dubai]](https://cdn.slidesharecdn.com/ss_thumbnails/hacking-web-20-defending-ajax-and-web-services-hitb-2007-dubai-25117-thumbnail.jpg?width=768&fit=bounds)
Recently uploaded
![[2024] GDSC India - Discover, Design, Develop.pdf.pdf](https://cdn.slidesharecdn.com/ss_thumbnails/2024gdscindia-discoverdesigndevelop-231211034858-9ac2f1f1-thumbnail.jpg?width=384&fit=bounds)
Recently uploaded (20)
![[2024] GDSC India - Discover, Design, Develop.pdf.pdf](https://cdn.slidesharecdn.com/ss_thumbnails/2024gdscindia-discoverdesigndevelop-231211034858-9ac2f1f1-thumbnail.jpg?width=768&fit=bounds)
Ajax Security
- 1. OWASP – Ajax Security Roberto Suggi Liverani Security Consultant Security-Assessment.com 5 December 2007
- 7. Ajax Components – Simple Diagram
- 9. Traditional Web Model vs Ajax Web Model
- 10. Classic Web Model – Usability/Time
- 11. Ajax Web Model – Usability/Time
- 13. Who is using Ajax? And many others…
- 20. Screenshot showing list of Myspace profiles infected by Samy Worm
- 21. And today there are still Myspace accounts with Samy as a hero! 532 results with live.com
- 27. Nduja - Webmail XSS Worm Demo
- 28. Web worms – Comparison So the question is: Can you think about the impact of the next cross domain web worm? Worm Target Domain(s) Cross Domain? Impact Samy worm Myspace.com No 1 million of users affected Yannamer worm Yahoo.com No Unknown number of yahoo users affected Nduja worm Tiscali.it Libero.it Lycos.it Excite.com Yes N/A – This is a PoC