In this week's binary episode, Binary Ninja Free releases along with Binja 4.0, automated infoleak exploit generation for the Linux kernel is explored, and Nintendo sues Yuzu.
Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/248.html
[00:00:00] Introduction
[00:00:31] Binary Ninja Free
[00:10:25] K-LEAK: Towards Automating the Generation of Multi-Step Infoleak Exploits against the Linux Kernel
[00:19:53] Glitching in 3D: Low Cost EMFI Attacks
[00:22:08] Nintendo vs. Yuzu
[00:38:32] Finding Gadgets for CPU Side-Channels with Static Analysis Tools
[00:40:12] ThinkstScapes Research Roundup - Q4 - 2023
The DAY[0] Podcast episodes are streamed live on Twitch twice a week:
-- Mondays at 3:00pm Eastern (Boston) we focus on web and more bug bounty style vulnerabilities
-- Tuesdays at 7:00pm Eastern (Boston) we focus on lower-level vulnerabilities and exploits.
We are also available on the usual podcast platforms:
-- Apple Podcasts: https://podcasts.apple.com/us/podcast/id1484046063
-- Spotify: https://open.spotify.com/show/4NKCxk8aPEuEFuHsEQ9Tdt
-- Google Podcasts: https://www.google.com/podcasts?feed=aHR0cHM6Ly9hbmNob3IuZm0vcy9hMTIxYTI0L3BvZGNhc3QvcnNz
-- Other audio platforms can be found at https://anchor.fm/dayzerosec
You can also join our discord: https://discord.gg/daTxTK9
[binary] Allocator MTE, libwebp, and Operation Triangulation
[bounty] Spoofing Emails, PandoraFMS, and Keycloak
[binary] RetSpill, A Safari Vuln, and Steam RCE
[bounty] IOT Issues and DNS Rebinding
[binary] Samsung Baseband and GPU Vulns
[bounty] Buggy Cookies and a macOS TCC Bypass
[binary] Hypervisor Bugs and a FAR-out iOS bug
[bounty] Kubernetes Code Exec and There Is No Spoon
[binary] A Heap of Linux Bugs
[bounty] Prompting for Secrets and Malicious Extensions
[binary] A Bundle of Windows Bugs
[bounty] Usurping Mastodon and Broken Signature Schemes
[binary] MTE Debuts, DNS Client Exploits, and iTLB Multihit
[bounty] Attacking OAuth, Citrix, and some P2O Drama
[binary] Windows Kernel Bugs, Safari Integer Underflow, and CONSTIFY
[bounty] Rapid Reset, Attacking AWS Cognito, and Confluence Bugs
[binary] A Chrome RCE, WebP 0day, and glibc LPE
[bounty] Insecure Firewalls, MyBB, and Winning with WinRAR
[binary] Busted Stack Protectors, MTE, and AI Powered Fuzzing
[bounty] DEF CON, HardwearIO, Broken Caching, and Dropping Headers
Create your
podcast in
minutes
It is Free
Insight Story: Tech Trends Unpacked
Zero-Shot
Fast Forward by Tomorrow Unlocked: Tech past, tech future
The Unbelivable Truth - Series 1 - 26 including specials and pilot
Lex Fridman Podcast