In this week's binary episode, Binary Ninja Free releases along with Binja 4.0, automated infoleak exploit generation for the Linux kernel is explored, and Nintendo sues Yuzu.
Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/248.html
[00:00:00] Introduction
[00:00:31] Binary Ninja Free
[00:10:25] K-LEAK: Towards Automating the Generation of Multi-Step Infoleak Exploits against the Linux Kernel
[00:19:53] Glitching in 3D: Low Cost EMFI Attacks
[00:22:08] Nintendo vs. Yuzu
[00:38:32] Finding Gadgets for CPU Side-Channels with Static Analysis Tools
[00:40:12] ThinkstScapes Research Roundup - Q4 - 2023
The DAY[0] Podcast episodes are streamed live on Twitch twice a week:
-- Mondays at 3:00pm Eastern (Boston) we focus on web and more bug bounty style vulnerabilities
-- Tuesdays at 7:00pm Eastern (Boston) we focus on lower-level vulnerabilities and exploits.
We are also available on the usual podcast platforms:
-- Apple Podcasts: https://podcasts.apple.com/us/podcast/id1484046063
-- Spotify: https://open.spotify.com/show/4NKCxk8aPEuEFuHsEQ9Tdt
-- Google Podcasts: https://www.google.com/podcasts?feed=aHR0cHM6Ly9hbmNob3IuZm0vcy9hMTIxYTI0L3BvZGNhc3QvcnNz
-- Other audio platforms can be found at https://anchor.fm/dayzerosec
You can also join our discord: https://discord.gg/daTxTK9
[binary] NetUSB RCE, a Linux Kernel Heap Overflow, and an XNU Use-After-Free
[bounty] Bypassing Box MFA and Bad AES Key Generation
[binary] Pwning Camera and Overflowing your Integers
[bounty] Bad Code and Bad URLs
[Binary] Rooting Ubuntu By Accident and Samsung Kernel Bugs
[Bounty] RocketChat RCE, Flickr, and a Critical Smart Contract Bug
An Android Kernel Bug and a Chrome+Edge Bug [Binary Exploitation]
Log4j RCE coming to a service near you and uBlock CSS Injection [Bounty]
MediaTek, Yet Another Chrome Bug, and BigSig [Binary Exploitation]
Bypassing MFA, WebCache Poisoning, and AWS SageMaker [Bounty Hunting]
KVM Bugs and an iOS IOMFB Kernel Exploit [Binary Exploitation]
GitLab Prototype Pollution and Some Authentication Bypasses [Bounty Hunting]
Hacking Neural Nets, a Chrome WebRTC UAF and Pwning Windows [Binary Exploitation]
Big Bounties by Exploiting WebKit's CSP & Concrete CMS Bugs [Bounty Hunting]
DDR4 Rowhammer, Azure Bugs, "Essential 0days", and Backdoored IDA [Binary Exploitation]
Rust in the Web? A Special Guest and some Bad Crypto [Bounty Hunting]
A too trusty TrustZone and a few Linux Kernel bugs [Binary Exploitation]
A MacOS SIP Bypass & an XSS Fiesta [Bounty Hunting]
Type Confusion in Android NFC, PHP-FPM Local Privilege Escalation, and CallbackHell [Binary Exploitation]
Discourse SNS RCE, a Stored XSS in GitLab, and a Reddit Race Condition [Bug Hunting]
Create your
podcast in
minutes
It is Free
Insight Story: Tech Trends Unpacked
Zero-Shot
Fast Forward by Tomorrow Unlocked: Tech past, tech future
The Unbelivable Truth - Series 1 - 26 including specials and pilot
Lex Fridman Podcast