The Insecurity Caused by Trusting Your Client-Side Storage

Explore the security risks associated with client-side storage in this 41-minute conference talk from the OWASP Foundation. Delve into the vulnerabilities of cookies and web storage, understanding the potential for exploitation in web applications. Learn about tainted chromium, exploit patterns, and attack vectors through practical demonstrations. Examine the credibility of IndexDB and the dangers of exploitable data in JSON objects. Discover the concept of cold cashing and its implications. Gain insights into effective solutions, including the importance of host names in securing client-side storage. Conclude with a comprehensive understanding of the insecurities caused by trusting client-side storage and strategies to mitigate these risks.

Intro
Cookies
Web Storage
What we are doing
The tainted chromium
Exploiting web applications
Exploit patterns
Attack vectors
Demo
IndexDB Credibility
Exploitable Data
JSON Objects
Cold Cashing
Solutions
Host Names
Conclusion