Abusing archive-based file formats

Settings

Always show controls

Qualities

UbiCast player

Keyboard shortcuts

Action

Key

Play / Pause

K or space

Mute / Unmute

Toggle fullscreen mode

Select next subtitles

Select next audio track

Toggle automatic slides maximization

Seek 5s backward

left arrow

Seek 5s forward

right arrow

Seek 10s backward

shift + left arrow or J

Seek 10s forward

shift + right arrow or L

Seek 60s backward

control + left arrow

Seek 60s forward

control + right arrow

Seek 1 frame backward

alt + left arrow

Seek 1 frame forward

alt + right arrow

Decrease volume

shift + down arrow

Increase volume

shift + up arrow

Decrease playback rate

Increase playback rate

Seek to end

end

Seek to beginning

beginning

Loading Click here to add:

Subscribe to notifications

When subscribed to notifications, an email will be sent to you for all added annotations.

Your user account has no email address.

Information on this media

59 views

If a format structure isn't vulnerable, can that change once wrapped in an archive ?

File formats abuses depend on specific structure characteristics, which makes some file formats not vulnerable. It's however quite common to wrap some formats in specific archive formats.
Combining a format structure with an archive structure may change the outcome, making the result vulnerable by exploiting outside of the box.

Ange Albertini

Reverse engineer passionate for file formats.
Currently infosec engineer at Google.

Creation date: July 5, 2022

Speakers: Ange Albertini

License: CC BY-SA v4

Links:

Latest annotations RSS feed

Information on this media

Other media in the channel "2022"