Fedotkin Zakhar - Reveal the unseen: Getting access to data with graphic file editing libraries

Share this & earn $10
ZeroNights
Published at : 23 Dec 2020
515 views
16
0

There is a wide variety of standards that allow adding additional info (commentaries) to media files. EXIF (Exchangeable Image File Format), Adobe XMP (eXtensible Metadata Platform), and PNG Text Chunks are but a small part of them. They are supposed to help add info about a copyright holder, date and time. But does the theory match reality?

With this report, we are going to overview widely-known tools that enable metadata extraction in the context of BugBounty websites and elaborate on the ways to automize the process.
It has been two years already since ImageTragick put the community into a flutter. Still, developers tend to trust the procedure of converting images of a user to the library. What data can an attacker pilfer without using external libraries? What is CVE-2018-16323 all about? How can one exploit the vulnerability? We will demonstrate all these to you through the case of a real web application.
ZeroNights 2018

LINDEMANN - Steh auf (Official Video)

LINDEMANN - Steh auf (Official Video)

Gang Starr - Form of Intellect

Gang Starr - Form of Intellect

Gold Gad - Client Convo

Gold Gad - Client Convo

Setting up my CUSTOM WATERCOLOUR PALETTE | Which brands? Which colours? Let's swatch them out!

Setting up my CUSTOM WATERCOLOUR PALETTE | Which brands? Which colours? Let's swatch them out!

Seek - Totul In Doi

Seek - Totul In Doi

NCT Jaehyun likes Lisa? : Judging from fancams

NCT Jaehyun likes Lisa? : Judging from fancams

HOW TO GET NEW SHADOW MIDAS SKIN IN FORTNITE!

HOW TO GET NEW SHADOW MIDAS SKIN IN FORTNITE!

Screaming Trees - Nearly Lost You [1992]

Screaming Trees - Nearly Lost You [1992]

DO NOT WANT

DO NOT WANT

Are fixed retainers better than removable retainers? - Dr. Divyashree Rajendra

Are fixed retainers better than removable retainers? - Dr. Divyashree Rajendra

AC/DC - Realize Guitar Lesson - All Main Guitar Parts

AC/DC - Realize Guitar Lesson - All Main Guitar Parts

Betta Fish!!! CARE, TEMPERATURE, TANK SIZE AND MORE!!!

Betta Fish!!! CARE, TEMPERATURE, TANK SIZE AND MORE!!!

Keeping Weight Off - The Nebraska Medical Center

Keeping Weight Off - The Nebraska Medical Center

Funk Turco - Ay Battı (Se Puso La Luna) de Fikret Kızılok  (1974)

Funk Turco - Ay Battı (Se Puso La Luna) de Fikret Kızılok (1974)

Funny Stories About Wolfoo Plays Hide and Seek with the Change Color Like Chameleon | Wolfoo Channel

Funny Stories About Wolfoo Plays Hide and Seek with the Change Color Like Chameleon | Wolfoo Channel

Semi/Truck/Tractor Pulls! Over The Top Diesel Showdown - Session 1

Semi/Truck/Tractor Pulls! Over The Top Diesel Showdown - Session 1

POP SMOKE - MOOD SWINGS ft. Lil Tjay (Official Video)

POP SMOKE - MOOD SWINGS ft. Lil Tjay (Official Video)

David Sinclair Is Extending Human Lifespan | Rich Roll Podcast

David Sinclair Is Extending Human Lifespan | Rich Roll Podcast

Scientists Stumble Upon New Organ We Never Knew We Had | Mach | NBC News

Scientists Stumble Upon New Organ We Never Knew We Had | Mach | NBC News

Being Secular is not normal- Sadhguru

Being Secular is not normal- Sadhguru

Selena Gomez - Me & The Rhythm

Selena Gomez - Me & The Rhythm

DON'T ASK MY NEIGHBOR-THE EMOTIONS-SOUL TRAIN

DON'T ASK MY NEIGHBOR-THE EMOTIONS-SOUL TRAIN

BALDI'S BASICS RAP by JT Music [SFM]

BALDI'S BASICS RAP by JT Music [SFM]

The Darkness - With a Woman

The Darkness - With a Woman

How to Dress Like a slender On Roblox

How to Dress Like a slender On Roblox

15 Words - About the Environment

15 Words - About the Environment

Selections from The Great Race by Mancini/arr. Bulla

Selections from The Great Race by Mancini/arr. Bulla

TOP 10 | Stunning HIGH NOTES in The Voice that are out of this world!

TOP 10 | Stunning HIGH NOTES in The Voice that are out of this world!

Live To Sparkle FINALE

Live To Sparkle FINALE

Clip: Luo Yunxi Takes Care Of Bai Lu Who Faints From Work | Love is Sweet EP32 | 半是蜜糖半是伤 | iQIYI

Clip: Luo Yunxi Takes Care Of Bai Lu Who Faints From Work | Love is Sweet EP32 | 半是蜜糖半是伤 | iQIYI

STORMZY - VOSSI BOP

STORMZY - VOSSI BOP

Sophie Ellis-Bextor - Come With Us

Sophie Ellis-Bextor - Come With Us

How to Spend a Fortune

How to Spend a Fortune

A Whole Bucket of Fun | Live The Dream Cube Draft #8

A Whole Bucket of Fun | Live The Dream Cube Draft #8

🚀 Kerbal Space Program: С чего начать?! [Гайд прохождение]

🚀 Kerbal Space Program: С чего начать?! [Гайд прохождение]

Which Guys Do You Prefer: Hispanic or Black? | USC College Edition (Public Interview)

Which Guys Do You Prefer: Hispanic or Black? | USC College Edition (Public Interview)

Soundly Tutorial #5 - Your Cloud Libraries

Soundly Tutorial #5 - Your Cloud Libraries

A Terrific Teacher's Wonderful Surprise

A Terrific Teacher's Wonderful Surprise

YUXU - ALDATDIN MƏNİ SƏN

YUXU - ALDATDIN MƏNİ SƏN

7 Tips to Spending Money Wisely | Phil Town

7 Tips to Spending Money Wisely | Phil Town

20181228116 Children Of Soldiers Bring Airport Terminal To Standstill

20181228116 Children Of Soldiers Bring Airport Terminal To Standstill

this immoderate translation

this immoderate translation

LetoDie - Mau Temperamento 2

LetoDie - Mau Temperamento 2

Create a Payment API with Stripe using Hasura Actions

Create a Payment API with Stripe using Hasura Actions

Top 10 Board Games Gaining Popularity | October 2020

Top 10 Board Games Gaining Popularity | October 2020

Flutter: Firebase Tutorial Part 1 | Auth and Sign in

Flutter: Firebase Tutorial Part 1 | Auth and Sign in

how to sign into traderie

how to sign into traderie

Turks protest bill making it illegal to deny Armenian genocide

Turks protest bill making it illegal to deny Armenian genocide

Is Mental Illness Real? | Richard Bentall, Ann John, Lucy Johnstone

Is Mental Illness Real? | Richard Bentall, Ann John, Lucy Johnstone