Other nomination

ElectroVolt - Pwning Popular Desktop Apps

Mohan Sri Rama Krishna, Max Garrett, Aaditya Purani and William Bowling · i.blackhat.com · 20 October 2022

How an XSS in an Electron renderer is escalated to remote code execution: prototype pollution gadgets leak the internal IPC and remote modules, weak contextIsolation and nodeIntegration settings expose Node APIs, and misconfigured new-window handlers open unsandboxed windows. Demonstrated against Discord, Microsoft Teams, Notion and others.

Record

Researcher

Mohan Sri Rama Krishna, Max Garrett, Aaditya Purani and William Bowling

Published by

i.blackhat.com

Date

20 October 2022

Format

Recording

In the archive

• Nominated for the 2022 Top 10 Web Hacking Techniques

Related sources

• Slides
• Discord case study
• Discord walkthrough (2024)
• DEF CON presentation
• Talk recording
• Talk recording

Tags

• rce
• sandbox-escape
• prototype-pollution
• gadget-chain
• xss
• open-redirect
• electron
• nodejs
• attack-chain
• bug-bounty
• owasp-a03-2021
• owasp-a04-2021
• owasp-a08-2021

This page is the archive's own catalogue record. The research is the work of Mohan Sri Rama Krishna, Max Garrett, Aaditya Purani and William Bowling, first published at the original source. Preserved copies are kept so the citation survives its host.