Reflected File Download - A New Web Attack Vector
Explore a new web attack vector called Reflected File Download (RFD) in this Black Hat conference talk. Learn how attackers can exploit trusted domains to download malicious files without uploading them, bypassing security measures and potentially running shell commands on victims' computers. Discover the mechanics of RFD attacks, their impact on popular websites like Google and Bing, and how they can be used to create cross-social-network worms. Gain insights into the attack's requirements, exploitation techniques, and potential countermeasures. Witness live demonstrations showcasing the power of RFD, including examples on Gmail and Google.com. Understand the implications for web security and learn about proposed solutions to mitigate this threat.