================================================================================
The Web/Local attacks are designed by Yaoqi Jia, Zheng Leong Chua, Hong Hu, Shuo Chen, Prateek Saxena and Zhenkai Liang.
Videos for our attacks are available at https://youtu.be/fIHaiQ4btok.
Demo: Dropbox. https://youtu.be/P-oX0wEasz4.
Demo: FILE Scheme. https://youtu.be/IPWJzzpvJdA.
Demo: Google Play. https://youtu.be/nKyvCo5cn6c.
Demo: VNC. https://youtu.be/dYSTxmNVgxI.
Our POC works for Chrome 33. We'll provide a link for the VM of this version soon.
The code is a research-quality proof of concept, and is still under development for more features and bug-fixing.
The ``Web/Local'' Boundary Is Fuzzy: A Security Study of Chrome’s Process-based Sandboxing
Yaoqi Jia, Zheng Leong Chua, Hong Hu, Shuo Chen, Prateek Saxena and Zhenkai Liang.
In the 23rd ACM Conference on Computer and Communications Security ( CCS 2016 )