Protocol-Security

Cross-Origin Web Attacks via HTTP/2 Server Push and Signed HTTP Exchange
Pinji Chen, Jianjun Chen, Mingming Zhang, Qi Wang (Eki), Yiming Zhang, Mingwei Xu, Haixin Duan
to be appeared
Inbox Invasion: Exploiting MIME Ambiguities to Evade Email Attachment Detectors
Jiahe Zhang, Jianjun Chen, Qi Wang (Eki), Hangyu Zhang, Chuhan Wang, Jianwei Zhuge, Haixin Duan
to be appeared
Break the Wall from bottom: Automated Discovery of Protocol-Level Evasion Vulnerabilities in Web Application Firewalls
Web Application Firewalls (WAFs) are a crucial line of defense against web-based attacks. However, an emerging threat comes from …
Qi Wang (Eki), Jianjun Chen, Zheyu Jiang, Run Guo, Ximeng Liu, Chao Zhang, Haixin Duan
PDF Cite Blackhat USA 2024