Exploiting Leakage in Password Managers via Injection Attacks
Fuente:
arXiv
Guardado en:
| Autores principales: | , , , , |
|---|---|
| Formato: | Preprint |
| Publicado: |
2024
|
| Materias: | |
| Acceso en línea: | |
| Etiquetas: |
Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
|
| _version_ | 1866913467506622464 |
|---|---|
| author | Fábrega, Andrés Namavari, Armin Agarwal, Rachit Nassi, Ben Ristenpart, Thomas |
| author_facet | Fábrega, Andrés Namavari, Armin Agarwal, Rachit Nassi, Ben Ristenpart, Thomas |
| contents | This work explores injection attacks against password managers. In this setting, the adversary (only) controls their own application client, which they use to "inject" chosen payloads to a victim's client via, for example, sharing credentials with them. The injections are interleaved with adversarial observations of some form of protected state (such as encrypted vault exports or the network traffic received by the application servers), from which the adversary backs out confidential information. We uncover a series of general design patterns in popular password managers that lead to vulnerabilities allowing an adversary to efficiently recover passwords, URLs, usernames, and attachments. We develop general attack templates to exploit these design patterns and experimentally showcase their practical efficacy via analysis of ten distinct password manager applications. We disclosed our findings to these vendors, many of which deployed mitigations. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2408_07054 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | Exploiting Leakage in Password Managers via Injection Attacks Fábrega, Andrés Namavari, Armin Agarwal, Rachit Nassi, Ben Ristenpart, Thomas Cryptography and Security This work explores injection attacks against password managers. In this setting, the adversary (only) controls their own application client, which they use to "inject" chosen payloads to a victim's client via, for example, sharing credentials with them. The injections are interleaved with adversarial observations of some form of protected state (such as encrypted vault exports or the network traffic received by the application servers), from which the adversary backs out confidential information. We uncover a series of general design patterns in popular password managers that lead to vulnerabilities allowing an adversary to efficiently recover passwords, URLs, usernames, and attachments. We develop general attack templates to exploit these design patterns and experimentally showcase their practical efficacy via analysis of ten distinct password manager applications. We disclosed our findings to these vendors, many of which deployed mitigations. |
| title | Exploiting Leakage in Password Managers via Injection Attacks |
| topic | Cryptography and Security |
| url | https://arxiv.org/abs/2408.07054 |