app.setAsDefaultRCEClient: Electron, scheme handlers and stealthy security patches — ZeroNights 2019
ZeroNights 2019 | Zeronights 2019 EN | Program En | app.setAsDefaultRCEClient: Electron, scheme handlers and stealthy security patches
app.setAsDefaultRCEClient: Electron, scheme handlers and stealthy security patches
November 12, 13:00|45min|mir hall

In this talk, we present techniques used to gain Remote Code Execution through URI scheme handlers in six popular Electron apps — despite being patched against CVE-2018-1000006. Additionally, we expose two mitigations since implemented by Electron in almost complete silence.

Juho Nurminen

Juho Nurminen

Juho Nurminen has nearly a decade of experience in application security starting from his first submissions to the Google VRP as a high school kid. He's seen the software industry from both the developer's and pentester's perspectives, and over the years he's been credited for several CVEs in Chrome, Firefox, Safari as well as a few more unconventional browsers.
Reports
Program
Reports
Program