Contents
Chapter 1 Web Browser Security
Symbiosis with the Web Application
Anti-phishing and Anti-malware
Understanding Control Initiation
Using Cross-site Scripting Attacks
Using Compromised Web Applications
Using Social Engineering Attacks
Using Man-in-the-Middle Attacks
Understanding Control Retention
Exploring Communication Techniques
Using Cross-origin Resource Sharing
Using DNS Tunnel Communication
Exploring Persistence Techniques
Using Man-in-the-Browser Attacks
Chapter 4 Bypassing the Same Origin Policy
Understanding the Same Origin Policy
Understanding the SOP with the DOM
Understanding the SOP with CORS
Understanding the SOP with Plugins
Understanding the SOP with UI Redressing
Understanding the SOP with Browser History
Bypassing SOP in Internet Explorer
Bypassing SOP in Cloud Storage
Exploiting UI Redressing Attacks
Using Mouse and Pointer Events
Controlling the Webcam and Microphone
Fingerprinting using HTTP Headers
Fingerprinting using DOM Properties
Fingerprinting using Software Bugs
Bypassing Path Attribute Restrictions
Attacking Encryption in JavaScript
JavaScript and Heap Exploitation
Getting Shells using Metasploit
Getting Started with Metasploit
Chapter 7 Attacking Extensions
Understanding Extension Anatomy
How Extensions Differ from Plugins
How Extensions Differ from Add-ons
Understanding Firefox Extensions
Understanding Chrome Extensions
Discussing Internet Explorer Extensions
Fingerprinting using HTTP Headers
Fingerprinting using the Manifest
Achieving OS Command Execution
Achieving OS Command Injection
How Plugins Differ from Extensions
How Plugins Differ from Standard Programs
Chapter 9 Attacking Web Applications
Enumerating Cross-origin Quirks
Cross-origin Web Application Detection
Discovering Intranet Device IP Addresses
Enumerating Internal Domain Names
Cross-origin Web Application Fingerprinting
Cross-origin Authentication Detection
Exploiting Cross-site Request Forgery
Understanding Cross-site Request Forgery
Attacking Password Reset with XSRF
Using CSRF Tokens for Protection
Cross-origin Resource Detection
Cross-origin Web Application Vulnerability Detection
Detecting Cross-site Scripting Vulnerabilities
Launching Denial-of-Service Attacks
DDoS Using Multiple Hooked Browsers
Launching Web Application Exploits
Cross-origin JBoss JMX Remote Command Execution
Cross-origin GlassFish Remote Command Execution
Cross-origin m0n0wall Remote Command Execution
Cross-origin Embedded Device Command Execution
Identifying the Hooked Browser's Internal IP
Identifying the Hooked Browser's Subnet
Ping Sweeping using XMLHttpRequest
Port Scanning using the IMG Tag
Fingerprinting Non-HTTP Services
Achieving Inter-protocol Communication
Achieving Inter-protocol Exploitation
Getting Shells using BeEF Bind
Using BeEF Bind in your Exploits
Using BeEF Bind as a Web Shell