WhatsApp - a malicious GIF that could execute code on your smartphone - Bug Bounty Reports Explained

Описание к видео WhatsApp - a malicious GIF that could execute code on your smartphone - Bug Bounty Reports Explained

📧 Subscribe to BBRE Premium: https://bbre.dev/premium
✉️ Sign up for the mailing list: https://bbre.dev/nl
📣 Follow me on Twitter: https://bbre.dev/tw

This video is an explanation of double-free vulnerability that allowed the attacker prepare a malicious GIF image that could execute remote commands on victim's smartphone in WhatsApp's context.

Report:
https://awakened1712.github.io/hackin...

Reporter's website:
https://awakened1712.github.io/

Create you own malicious GIF:
https://github.com/awakened1712/CVE-2...

Follow me on twitter:
  / gregxsunday  

Timestamps:
00:00 Intro
00:26​ GIF file structure
02:21​ Double-free bug
05:47​ How to achieve RCE?
07:26​ Building the exploit

#rce #WhatsApp #double-free

Комментарии

Информация по комментариям в разработке

Похожие видео