Hack Any Website
Gregoire Gentil - Hack Any Website Hack Any Website This session will learn how you can hack any website whatever its protection.
Summary
Architecture and Background
Gregoire Gentil - Hack Any Website Hack Any Website This session will learn how you can hack any website whatever its protection. The most basic and simple attack against a website is to change the content of one of its pages. When trying to attack a website, one first thinks to attack the web server.
Vulnerability Analysis
But attacking the client could be easier and more powerful. This is what you will see during this session. In one hour, you will understand how to take the full control of Internet Explorer 4.x and above and modify on-the-fly the content of any HTML page before it is rendered.
Exploitation and Demonstrations
Gregoire Gentil, 30 years old, has been the founder of three software companies, the last one focusing on security for the untrusted computer (self-service computer in a cyber-cafe, home computer, ...). Gregoire Gentil has also been a consultant at McKinsey Company. He has audited highly complex IT architectures and organizations of banks, and has participated to the re-organization of the IT department of the #1 European insurance company.
Remediation and Defensive Strategies
Gregoire Gentil has more than twelve years of experience in different languages including C/C++. Gregoire Gentil was born in Paris but now lives in California. Gregoire Gentil has graduated from Ecole Polytechnique in France, and holds a Master of Science from Stanford University.
Related talks
Main Stage·18 min
Sho Ho
Sho Ho explores foe the release of feed over email at DEF CON 18, examining appsec and practical defenses.
Main Stage·42 min
Fyodor · David Fifield
Fyodor and David Fifield explores mastering the nmap scripting engine at DEF CON 18, examining appsec and practical defenses.
Main Stage·30 min
Subere
Subere explores fingerprinting and cracking java obfuscated code at DEF CON 15, examining web-security and practical defenses.


