A tale about chained vulnerabilities in Firefox

•

1 like•510 views

The document discusses multiple issues and vulnerabilities in the Firefox web browser, including issues with JavaScript, secrets, symlinks, and an exploit repository. It covers constraints and solutions to these technical problems, as well as results and short summaries. The overall topic is an introduction to analyzing vulnerabilities in Firefox through a forensic analysis lab.

Engineering

Copyright © 2013 viaForensics, LLC Training: Intro to viaLab
Firefox
-
A tale about chained
vulnerabilities

Copyright © 2013 viaForensics, LLC Training: Intro to viaLab
Introduction
●
●
●
…

Copyright © 2013 viaForensics, LLC Training: Intro to viaLab
Issue I - This is not the activity
you were looking for
●
●
■
■
■
●
●

Copyright © 2013 viaForensics, LLC Training: Intro to viaLab
Issue I - Constraints

Copyright © 2013 viaForensics, LLC Training: Intro to viaLab
Issue II - Mr. Javascript
Yes, I really like Tarantino’s films
●
■
■
● …
■
■
■

Copyright © 2013 viaForensics, LLC Training: Intro to viaLab
Temporary Solution

Copyright © 2013 viaForensics, LLC Training: Intro to viaLab
Results

Copyright © 2013 viaForensics, LLC Training: Intro to viaLab
Issue II - Constraints

Copyright © 2013 viaForensics, LLC Training: Intro to viaLab
Issue III - I know your secrets
●
●

Copyright © 2013 viaForensics, LLC Training: Intro to viaLab
Solution
●

Copyright © 2013 viaForensics, LLC Training: Intro to viaLab
In short
●
■
■
■

Copyright © 2013 viaForensics, LLC Training: Intro to viaLab
Issue IV - One symlink to pwn
them all
●
■

Copyright © 2013 viaForensics, LLC Training: Intro to viaLab

Copyright © 2013 viaForensics, LLC Training: Intro to viaLab
Issue V - Buy four, get the fifth
FREE
●
●
■
●

Copyright © 2013 viaForensics, LLC Training: Intro to viaLab
Firefox Exploit repository

Viewers also liked

Adversarial Post-Ex: Lessons From The Pros

Justin Warner

Dcm#8 elastic search

Ivan Wallarm

Help Doctor, my application is an onion!

Sebastián Guerrero Selma

Null bhopal Sep 2016: What it Takes to Secure a Web Application

Anant Shrivastava

pwnd.sh

Chandrapal Badshah

Drilling deeper with Veil's PowerTools

Will Schroeder

Web Application Firewall

Chandrapal Badshah

SSL Pinning and Bypasses: Android and iOS

Anant Shrivastava

Automated API pentesting using fuzzapi

Abhijeth D

Ceph Performance: Projects Leading Up to Jewel

Red_Hat_Storage

BSidesLV 2016 - Powershell - Hunting on the Endpoint - Gerritz

Christopher Gerritz

Viewers also liked (11)

Adversarial Post-Ex: Lessons From The Pros

Dcm#8 elastic search

Help Doctor, my application is an onion!

Null bhopal Sep 2016: What it Takes to Secure a Web Application

pwnd.sh

Drilling deeper with Veil's PowerTools

Web Application Firewall

SSL Pinning and Bypasses: Android and iOS

Automated API pentesting using fuzzapi

Ceph Performance: Projects Leading Up to Jewel

BSidesLV 2016 - Powershell - Hunting on the Endpoint - Gerritz

Recently uploaded

Pharmacy management system project report..pdf

Kamal Acharya

This project is being considered in order to reduce and totally eliminate loss of customers to competitors, and save the company from folding up. The current system is manual and it is time consuming. It is also cost ineffective, and average return is low and diminishing. Currently, customers can call or walk-in in order to rent or reserve a vehicle. The staff of the company will check their file to see which vehicle is available for rental. The current system is error prone and customers are dissatisfied. The goal of this project is to automate vehicle rental and reservation so that customers do not need to walk-in or call in order to reserve a vehicle. They can go online and reserve any kind of vehicle they want and that is available. Even when a customer chooses to walk-in, computers are available for him to go online and perform his reservation. When he choose to reserve by phone, any of the customer service representatives can help him reserve the vehicle speedily and issue him a reservation number. The VRS will maintain the database of all vehicles the company has. It will also keep track of all vehicle reservation and return. Reports will be generated bi-weekly. Reports for the Accounts Manager will detail the cost incurred to maintain each vehicle and revenue accrued on each vehicle. Reports for the Maintenance Manager will detail the present mileage of the car in order for him to take care of the vehicle servicing, and when each vehicle will be due for tag renewal. The Branch Manager’s report will detail total cost incurred and total revenue accrued, and the status of each vehicle so that he can decide whether to sell the vehicle or still keep it.

ONLINE VEHICLE RENTAL SYSTEM PROJECT REPORT.pdf

Kamal Acharya

İTÜ CAD and Reverse Engineering Workshop

Emre Günaydın

Online movie ticket booking system for movies is a web-based program. This application allows users to purchase cinema tickets over the portal. To buy tickets, people must first register or log in. This website's backend is PHP and JavaScript, and the front end is HTML and CSS. All phases of the software development life cycle are efficiently managed in order to design and implement software. On the website, there are two panels: one for administrators and one for customers/users. The admin has the ability to add cinemas, movies, delete, halt execution, and add screens, among other things. The website is simple to navigate and appealing, saving the end user time.

A CASE STUDY ON ONLINE TICKET BOOKING SYSTEM PROJECT.pdf

Kamal Acharya

Toll Tax Management System is a web based application that can provide all the information related to toll plazas and the passenger checks in and pays the amount, then he/she will be provided by a receipt. With this receipt he/she can leave the toll booth without waiting for any verification call. The information would also cover registration of staff, toll plaza collection, toll plaza collection entry for vehicles, date wise report entry, Vehicle passes and passes reports b/w dates.

Toll tax management system project report..pdf

Kamal Acharya

Halogenation process of chemical process industries

MuhammadTufail242431

It is now-a-days very important for the people to send or receive articles like imported furniture, electronic items, gifts, business goods and the like. People depend vastly on different transport systems which mostly use the manual way of receiving and delivering the articles. There is no way to track the articles till they are received and there is no way to let the customer know what happened in transit, once he booked some articles. In such a situation, we need a system which completely computerizes the cargo activities including time to time tracking of the articles sent. This need is fulfilled by Courier Management System software which is online software for the cargo management people that enables them to receive the goods from a source and send them to a required destination and track their status from time to time.

Courier management system project report.pdf

Kamal Acharya

Arduino based vehicle speed tracker project

Rased Khan

2024 DevOps Pro Europe - Growing at the edge

Paco Orozco

Introduction to Machine Learning Unit-4 Notes for II-II Mechanical Engineering

C Sai Kiran

fundamentals of drawing and isometric and orthographic projection

jeevanprasad8

Laundry firms currently use a manual system for the management and maintenance of critical information. The current system requires numerous paper forms, with data stores spread throughout the laundry management infrastructure. Often information is incomplete or does not follow management standards. Records are often lost in transit during computation requiring a comprehensive auditing process to ensure that no vital information is lost. Multiple copies of the same information exist in the laundry firm data and may lead to inconsistencies in data in various data stores. A significant part of the operation of any laundry firm involves the acquisition, management and timely retrieval of great volumes of information. This information typically involves; customer personal information and clothing records history, user information, price of delivery and received date, users scheduling as regards customers details and dealings in service rendered, also our products package waiting list. All of this information must be managed in an efficient and cost wise fashion so that the organization resources may be effectively utilized. We present the design and implementation of a laundry database management system (LBMS) used in a laundry establishment. Laundry firms are usually faced with difficulties in keeping detailed records of customers clothing; this little problem as seen to most laundry firms is highly discouraging as customers are filled with disappointments, arising from issues such as customer clothes mix-ups and untimely retrieval of clothes. The aim of this application is to determine the number of clothes collected, in relation to their owners, as this also helps the users fix a date for the collection of their clothes. Also customer’s information is secured, as a specific id is allocated per registration to avoid contrasting information.

Laundry management system project report.pdf

Kamal Acharya

KIT-601 Lecture Notes-UNIT-3.pdf Mining Data Stream

Dr. Radhey Shyam

Scaling in conventional MOSFET for constant electric field and constant voltage

RCC Institute of Information Technology

Standard Reomte Control Interface - Neometrix

Neometrix_Engineering_Pvt_Ltd

IT-601 Lecture Notes-UNIT-2.pdf Data Analysis

Dr. Radhey Shyam

Top 13 Famous Civil Engineering Scientist

gettygaming1

WATER CRISIS and its solutions-pptx 1234

AafreenAbuthahir2

Construction method of steel structure space frame .pptx

wendy cai

The proposed project is developed to manage the automobile in the automobile dealer company. The main module in this project is login, automobile management, customer management, sales, complaints and reports. The first module is the login. The automobile showroom owner should login to the project for usage. The username and password are verified and if it is correct, next form opens. If the username and password are not correct, it shows the error message. When a customer search for a automobile, if the automobile is available, they will be taken to a page that shows the details of the automobile including automobile name, automobile ID, quantity, price etc. “Automobile Management System” is useful for maintaining automobiles, customers effectively and hence helps for establishing good relation between customer and automobile organization. It contains various customized modules for effectively maintaining automobiles and stock information accurately and safely. When the automobile is sold to the customer, stock will be reduced automatically. When a new purchase is made, stock will be increased automatically. While selecting automobiles for sale, the proposed software will automatically check for total number of available stock of that particular item, if the total stock of that particular item is less than 5, software will notify the user to purchase the particular item. Also when the user tries to sale items which are not in stock, the system will prompt the user that the stock is not enough. Customers of this system can search for a automobile; can purchase a automobile easily by selecting fast. On the other hand the stock of automobiles can be maintained perfectly by the automobile shop manager overcoming the drawbacks of existing system.

Automobile Management System Project Report.pdf

Kamal Acharya

Recently uploaded (20)

Pharmacy management system project report..pdf

ONLINE VEHICLE RENTAL SYSTEM PROJECT REPORT.pdf

İTÜ CAD and Reverse Engineering Workshop

A CASE STUDY ON ONLINE TICKET BOOKING SYSTEM PROJECT.pdf

Toll tax management system project report..pdf

Halogenation process of chemical process industries

Courier management system project report.pdf

Arduino based vehicle speed tracker project

2024 DevOps Pro Europe - Growing at the edge

Introduction to Machine Learning Unit-4 Notes for II-II Mechanical Engineering

fundamentals of drawing and isometric and orthographic projection

Laundry management system project report.pdf

KIT-601 Lecture Notes-UNIT-3.pdf Mining Data Stream

Scaling in conventional MOSFET for constant electric field and constant voltage

Standard Reomte Control Interface - Neometrix

IT-601 Lecture Notes-UNIT-2.pdf Data Analysis

Top 13 Famous Civil Engineering Scientist

WATER CRISIS and its solutions-pptx 1234

Construction method of steel structure space frame .pptx

Automobile Management System Project Report.pdf

A tale about chained vulnerabilities in Firefox

Recommended

Recommended

More Related Content

Viewers also liked

Viewers also liked (11)

Recently uploaded

Recently uploaded (20)

A tale about chained vulnerabilities in Firefox