0.0.0.0 Day: Exploiting Localhost APIs From The Browser

0.0.0.0 Day: Exploiting Localhost APIs From The Browser Gal Elbaz While seemingly local, services running on localhost are accessible to the browser using a flaw we found, exposing the ports on the localhost network interface and leaving the flood...

0.0.0.0 Day: Exploiting Localhost APIs From The Browser

Gal Elbaz

While seemingly local, services running on localhost are accessible to the browser using a flaw we found, exposing the ports on the localhost network interface and leaving the floodgates ajar to remote network attacks. This session will dive into the 0.0.0.0 exploit research conducted by the team.

https://bsidessf2025.sched.com/event/34382f8e3e5882763ef9ca2baaec5d68