加雷斯·海耶斯_分裂邮件原子利用解析器绕过访问控制.docxVIP

GARETHHEYESSplittingTheEmail

GARETHHEYES

SplittingThe

EmailAtom

ExploitingParsersTo

BypassAccessControls

OutlineWhyemailaddressparser discrepanciesmatter Methodology/Tooling 1.4.Defence5.Theshakyfoundation 2.Takeaways6.Parserdiscrepancies 3.-Unicodeover?ows

Outline

Whyemailaddressparser

discrepanciesmatter

Methodology/Tooling

1.

4.

Defence

5.

Theshakyfoundation

2.

Takeaways

6.

Parserdiscrepancies

3.

-

Unicodeover?ows

-

Encoded-word

-

Punycode

Whyemailaddressparserdiscrepancies matter

Whyemailaddressparserdiscrepancies matter

Predicting

Predictinganem