BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.bsidescbr.com.au//bsides-canberra-2026//talk//UGYDQ
 S
BEGIN:VTIMEZONE
TZID:Australia/Sydney
BEGIN:STANDARD
DTSTART:20250926T000000
TZNAME:AEST
TZOFFSETFROM:+1000
TZOFFSETTO:+1000
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20251005T030000
RDATE:20261004T030000
TZNAME:AEDT
TZOFFSETFROM:+1000
TZOFFSETTO:+1100
END:DAYLIGHT
BEGIN:STANDARD
DTSTART:20260405T030000
RDATE:20270404T030000
TZNAME:AEST
TZOFFSETFROM:+1100
TZOFFSETTO:+1000
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
SUMMARY:Headless Hunter - Automated exploitation of headless Chrome using 
 V8 n-days - Daniel Cooper
DTSTART;TZID=Australia/Sydney:20260926T151500
DTEND;TZID=Australia/Sydney:20260926T161000
DTSTAMP:20260727T191322Z
UID:pretalx-bsides-canberra-2026-UGYDQS@cfp.bsidescbr.com.au
DESCRIPTION:Consider a website. One that allows you to export PDF document
 s. Have you ever stopped to wonder how this works under the hood?\n\nComme
 rcial libraries exist to do the PDF generation heavy lifting\, but as they
  can be quite costly\, I wasn’t surprised to see developers reaching for
  Chrome’s “Print to PDF” functionality. What did surprise me was web
  applications not having up to date Chrome builds in their NPM dependencie
 s\, developers reaching for --no-sandbox rather than fiddling with Docker 
 and Kubernetes security knobs\, and web apps that allowed me to provide cu
 stom (and malicious) HTML and JavaScript for conversion to PDF.\n\nAll of 
 this inspired me to look into Chrome’s JavaScript engine\, V8\, to explo
 it these PDF generators. Chrome’s issue tracker documents many patched v
 ulnerabilities that work on old Chrome versions\, which is perfect for my 
 use case. The main challenge was that the exploits and techniques vary dep
 ending on the target Chrome version\, so I wondered\, why not make a tool 
 with enough exploits to cover all of them?\n\nIn this talk I outline my jo
 urney for developing the tool\, the design decisions I made\, the problems
  that I overcame\, and the lessons I learned along the way. The result is 
 a single web page that can exploit 24 common Chrome versions (and counting
 ) for remote code execution using V8 memory corruption.
LOCATION:Main Track
URL:https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/UGYDQS/
END:VEVENT
END:VCALENDAR