This document summarizes Dan Kaminsky's 2007 talk at Black Hat about exploiting vulnerabilities in the DNS system and web browser security policies to enable arbitrary TCP and UDP access from within a web browser. Kaminsky describes how controlling DNS responses allows an attacker to bypass firewalls and access internal networks by manipulating the browser's view of domain names and IP addresses. He then outlines his proof-of-concept attack software called "Slirpie" that implements a VPN-like tunnel using only a compromised web browser.

1. Black Ops 2007: Design Reviewing The Web AKA: “Packets Will Be Involved” Dan Kaminsky Director of Penetration Testing IOActive, Inc. copyright IOActive, Inc. 2006, all rights reserved.

33. Does anyone remember this?

49. OMG ACTIVEX FTW

50. PACKET CLAUS IS COMING TO TOWN

55. [extra slides]

58. The Chemical Brothers, “Where Do I Begin”

59. +30% vs. -30% tempo

65. Detecting “8”…

66. …and “9”