A Journey of Payload Delivery

A Journey of Payload Delivery

Explore payload delivery techniques in this 24-minute conference talk from Derbycon 2018. Delve into the intricacies of sending payloads, understanding different customer types, and implementing inflight detection and payload sampling. Learn about primary goals, including the use of Firefox Send, Web Crypto API, and browser encryption to avoid traffic inspection. Discover strategies to reach payloads from customer networks, minimize attribution, and reduce responses from link inspectors. Examine the weaponization of file-sharing services, Web Preview API, DNS, and TXT records in master-slave operations. Gain insights into Firefox operations and potential defenses against these techniques.