Thinking Outside the Sandbox - Violating Trust Boundaries in Uncommon Ways

Thinking Outside the Sandbox - Violating Trust Boundaries in Uncommon Ways

Explore uncommon techniques for bypassing application sandboxes in this Black Hat conference talk. Delve into four successful sandbox bypass methods used in Pwn2Own contest entries, analyzing attack vectors, root causes, and potential fixes. Learn about restricted access tokens, job object limitations, window station isolation, and mandatory integrity control. Examine attack surface archetypes, including IPC handling and shared resources. Discover unique approaches like abusing save file dialogs, clipboard manipulation, elevation policy exploitation, and symbolic link attacks. Gain insights into the evolving landscape of exploit development and understand how these techniques violate trust boundaries in modern browsers and plugins.