Discovering React2Shell: JavaScript’s Long-Awaited Deserialization Flight-mare
Engineers explore architecture and security mechanisms for Discovering React2Shell: JavaScript’s Long-Awaited Deserialization Flight-mare.
Summary
Black Hat session on Discovering React2Shell: JavaScript's Long-Awaited Deserialization Flight-mare.
Related talks
Black Hat·37 min
Bofei Chen · Yinzhi Cao · Lei Zhang · Xinyou Huang · Yuan Zhang · Min Yang
Engineers explore architecture and security mechanisms for JDD: In-depth Mining of Java Deserialization Gadget Chains.
Black Hat·41 min
Industry experts analyze emerging threats surrounding Bridging the Gap: Type Confusion and Boundary Vulnerabilities Between WebAssembly and JavaScript.
Black Hat·40 min
Industry experts analyze emerging threats surrounding How I Used a JSON Deserialization 0day to Steal Your Money on the Blockchain.