#NahamCon2022EU: Story of an RCE on Apple Through Hot Jar Swapping by Frans Rosen

#NahamCon2022EU is a virtual offensive security. This year's event was hosted by Farrah Hawa & InsidePhD!

Thank you to our sponsors for making this conference happen!

Frans Rosén is a highly skilled security researcher, tech entrepreneur and a security advisor at Detectify. He is a top ranked participant of bug bounty programs and two times winner of HackerOne's prestigious Most Valuable Hacker award. Frans is passionate about making the internet a safer place, and has stood behind numerous security research articles that has resulted in revised policies at AWS, Slack and Google Chrome. His security writeup continuously receive international coverage in numerous publications such as WIRED, Mashable, Observer, BBC, Ars Technica and Motherboard.

Free $100 DigitalOcean Credit:

Follow me on social media:

[ziot]

Absolute legendary finding. It was fun watching you go from idea to execution! 👏

[ccs]

This is the best walk through of a POC I’ve ever seen! I am on the blue side and read PoCs a lot. Not only that, you will probably hear about it very soon in cyber news. There’s a reason I stumbled on this video.

[tthtlc]

the reason compressed more than AADAF is because for the former you just need to store two piece of info - "A" and its length. But the latter you need essentially 5 piece of information, in order to reproduce the original data.

[abdeabdc]

This man is great, is the only one I follow on H1

[jesperwall]

Nice work, and a really good presentation 👍😀

[sharghaas]

I tried to keep up but at some point it started to become a bit blur in my head. I love how you explained all your process, this gave me some ideas for my upload testing methodology 🔥 The goat