DEF CON 15 - Michael Shrenk - The EXE Image Exploit
775 views · Published 4 February 2014 · 39:23 · Indexed 31 October 2026
Channel: DEFCONConference · 2014 · Science & Technology
Michael Schrenk: The Executable Image Exploit domain images; like MySpace or eBay. By uploading the following line of HTML to a community website,[img src="http://www.mydomain.com/executable.jpg?] you can launch a dynamic program that masquerades as a static image and capable of reading and writing cookies, analyzing referrer (and other browser) variables and access databases. It is even possible to create an image the causes a browser to execute JavaScript. A previous DEFCON Speaker (DC10 & DC11), Michael Schrenk has created Internet strategies for companies like: Disney, Nike, AOL and Callaway Golf. He is the author of ?Webbots, Spiders, and Screen Scrapers? (2007, No Starch Press), and has written for Computer World and Web Techniques magazines. Currently, he has an article (about webbots) in the July issue of php|architect. Mike has also taught college courses on web usability and Internet marketing. You can contact him at http://www.schrenk.com.
More from this channel
-
1:25
DEF CON 20 Documentary Bonus Clips - We Make No Money From You
-
1:15
DEF CON 20 Documentary Bonus Clips - Alexis Park Home Improvement
-
7:53
DEF CON 20 Documentary Bonus Clips - CDC muxed
-
3:45
DEF CON 20 Documentary Bonus Clips - Not the Same Anymore
-
2:27
DEF CON 20 Documentary Bonus Clips - Being a Party Host
-
2:09
DEF CON 20 Documentary Bonus Clips - A Top Qualitty Production
-
1:36
DEF CON 20 Documentary Bonus Clips - Creme Brulee
-
2:39
DEF CON 20 Documentary Bonus Clips - Barkode and Bloodkode