Completed
Scriptless Magecart attack
Class Central Classrooms beta
YouTube videos curated by Class Central.
Classroom Contents
The Bad Guys Win - Analysis of Magecart Vulnerabilities
Automatically move to the next video in the Classroom when playback concludes
- 1 Intro
- 2 Background - Script Inclusion diagram
- 3 Magecart: Digital supply-chain attack
- 4 Statistics - The data
- 5 30,000+ vulnerable assets
- 6 Popularity of affected sites
- 7 Cross-sector
- 8 Steal information
- 9 Active abuse
- 10 Threat model - Careful hacker
- 11 The enterprise challenges
- 12 Anti-Magecart solutions
- 13 General notes about the careful hacker
- 14 General things that careful hackers do
- 15 Bypass script monitoring
- 16 Bypass client-side solutions
- 17 Use browser native mechanisms
- 18 Enterprise use of browser native mechanisms
- 19 The Trusted-Source Injection (TSI) attack
- 20 Scriptless Magecart attack
- 21 Summary table: Enterprise vs. Hackers
- 22 What could be done?
