Home

Welcome to the TheHulk wiki!

Abstract

DOM Clobbering is a impactful type of code-reuse attack on the web, where attackers inject script-less HTML markups to exploit existing code snippets (so-called gadgets) within the webpage, altering its logic to achieve malicious outcomes such as Cross-site Scripting and client-side Request Forgery. While previous work has systematically studied the triggering of these gadgets—specifically, how different HTML markups can clobber named property lookups in programs across various browsers—the end-to-end exploitability of DOM Clobbering in real-world scenarios remains less explored. The two critical missing aspects are: 1/ understanding the attack techniques and prevalence of HTML markup injection in the modern web, and 2/ developing effective approaches for constructing payloads that effectively follow or manipulate the exisiting logic of these gadgets to lead to dangerous consequences.

rewrite

• DOM Clobbering is a type of code-reuse attack on the web, where attackers inject script-less HTML markups to exploit existing code snippets (gadgets) within the webpage, altering its logic to achieve malicious outcomes such as Cross-site Scripting and Client-side Request Forgery.
• While previous work have systematically studied the triggering of these gadgets, there are two flaws. 1: It makes the assumption that any HTML markup injection can be inserted before the evaluation of these gadgets. 2: Weak dynamic analysis and lack of an automated exploitation system.