Session Identifier are for Now, Passwords are Forever - XSS-Based Abuse of Browser Password Managers
▶Session Identifier are for Now, Passwords are Forever - XSS-Based Abuse of Browser Password Managers — a 2014 Black Hat Europe 2014 security conference talk on web-appsec (55:20 min). Watch the full video, indexed free on the Breach Arc Archive.
▶ Watch video on YouTube