A New Era of One-Click Attacks - How to Break Install-Less Apps

Explore the security vulnerabilities of Install-Less apps in this 28-minute Black Hat conference talk. Dive into novel attack methods targeting various implementations of Install-Less apps, including those hosted on native app engines, running on webview, or using componentized native apps. Examine specific vulnerabilities discovered in Apple App Clips, Google PWA, Google Instant App, and QuickApp that enable one-click attacks. Learn about the growing trend of Install-Less apps as vendors aim to streamline user experiences and reduce resource consumption. Gain insights from security researchers Bo Li, Yimin Wu, and Zhiyang Zeng as they present their findings and discuss the implications for app security in this new era of streamlined software deployment.