SecDocs Feed for author Billy Rios

[Slides] URI Use and Abuse

Fri, 27 Jan 2012 22:43:36 +0100

Authors: Billy Rios Nathan McFeters Rob Carter
Tags: URI
Event: Black Hat EU 2008

[Paper] URI Use and Abuse

Fri, 27 Jan 2012 22:43:19 +0100

Authors: Billy Rios Nathan McFeters Rob Carter
Tags: URI
Event: Black Hat EU 2008

[Paper] Kicking Down the Cross Domain Door (One XSS at a Time)

Tue, 19 Jul 2011 20:10:07 +0200

Authors: Billy Rios Raghav Dube
Tags: web application XSS
Event: Black Hat EU 2007

[Slides] Kicking Down the Cross Domain Door (One XSS at a Time)

Tue, 19 Jul 2011 20:09:26 +0200

Authors: Billy Rios Raghav Dube
Tags: web application XSS
Event: Black Hat EU 2007

[Slides] Will it Blend

Fri, 24 Dec 2010 05:25:19 +0100

Authors: Billy Rios
Tags: exploiting client side
Event: Ruxcon 2010
Abstract: Today’s information systems are giant mesh of complexity. Typical consumer systems have large numbers of software created by different software manufactures installed on their machines. This mesh of software creates an ecosystem, where software is intertwined and in some cases dependant on each other. When one piece of the ecosystem gets out of line, it can have a dramatic effect on the ecosystem as a whole. A small vulnerability or even an ‘annoying’ behaviour from one piece of software can alter the behaviour of a 2nd piece of software, a behavior which a 3rd piece of software is depending on for a security decision. Enter the world of blended vulnerabilities and attacks. This talk will discuss the details of various ‘blended’ attacks and demonstrates the chaining of seeming low risk vulnerabilities and unusual design decisions from popular software together to create a higher risk exploit.

[Slides] Cross-domain leakiness

Fri, 24 Sep 2010 08:52:00 +0200

Authors: Billy Rios Chris Evans
Tags: browser XSS
Event: Hack In The Box 2009 Dubai

[Video] Bad Sushi: Beating Phishers at Their Own Game

Fri, 02 Jul 2010 06:04:46 +0200

Authors: Nitesh Dhanjani Billy Rios
Tags: malware phishing
Event: Black Hat USA 2008

[Audio] Bad Sushi: Beating Phishers at Their Own Game

Fri, 02 Jul 2010 06:04:45 +0200

Authors: Nitesh Dhanjani Billy Rios
Tags: malware phishing
Event: Black Hat USA 2008

[Slides] Bad Sushi: Beating Phishers at Their Own Game

Fri, 02 Jul 2010 06:04:43 +0200

Authors: Nitesh Dhanjani Billy Rios
Tags: malware phishing
Event: Black Hat USA 2008

[Audio] Biting the Hand that Feeds You - Storing and Serving Malicous Content From Well Known Web Servers

Wed, 16 Dec 2009 06:11:09 +0100

Authors: Billy Rios Nathan McFeters
Tags: web application browser CSRF
Event: DEFCON 15

[Video] Biting the Hand that Feeds You - Storing and Serving Malicous Content From Well Known Web Servers

Fri, 24 Jul 2009 15:03:00 +0200

Authors: Billy Rios Nathan McFeters
Tags: web application browser CSRF
Event: DEFCON 15

[Slides] Biting the Hand that Feeds You - Storing and Serving Malicous Content From Well Known Web Servers

Fri, 24 Jul 2009 15:00:00 +0200

Authors: Billy Rios Nathan McFeters
Tags: web application browser CSRF
Event: DEFCON 15

[Paper] Biting the Hand that Feeds You - Storing and Serving Malicous Content From Well Known Web Servers

Fri, 24 Jul 2009 14:41:00 +0200

Authors: Billy Rios Nathan McFeters
Tags: web application browser CSRF
Event: DEFCON 15

[Slides] Bad Sushi - Beating Phishers at Their Own Game

Sat, 01 Mar 2008 13:07:00 +0100

Authors: Nitesh Dhanjani Billy Rios
Tags: phishing
Event: Black Hat DC 2008