This week we have a crazy crypto fail where some Android devices had updates signed by publicly available private keys, as well as some Docker container escapes.
Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/239.html
[00:00:00] Introduction
[00:00:22] Missing signs: how several brands forgot to secure a key piece of Android
[00:13:37] ModSecurity: Path Confusion and really easy bypass on v2 and v3
[00:21:24] runc process.cwd & leaked fds container breakout [CVE-2024-21626]
[00:24:23] Buildkit GRPC SecurityMode Privilege Check [CVE-2024-23653]
[00:27:49] Jumpserver Preauth RCE Exploit Chain
[00:43:49] 500$: MFA bypass By Race Condition
[00:49:52] HTTP Downgrade attacks with SmuggleFuzz
The DAY[0] Podcast episodes are streamed live on Twitch twice a week:
-- Mondays at 3:00pm Eastern (Boston) we focus on web and more bug bounty style vulnerabilities
-- Tuesdays at 7:00pm Eastern (Boston) we focus on lower-level vulnerabilities and exploits.
We are also available on the usual podcast platforms:
-- Apple Podcasts: https://podcasts.apple.com/us/podcast/id1484046063
-- Spotify: https://open.spotify.com/show/4NKCxk8aPEuEFuHsEQ9Tdt
-- Google Podcasts: https://www.google.com/podcasts?feed=aHR0cHM6Ly9hbmNob3IuZm0vcy9hMTIxYTI0L3BvZGNhc3QvcnNz
-- Other audio platforms can be found at https://anchor.fm/dayzerosec
You can also join our discord: https://discord.gg/daTxTK9
[binary] Exploiting VMware Workstation and the Return of CSG0-Days
[bounty] Jellyfin Exploits and TOCTOU Spellcasting
[binary] Attacking VirtualBox and Malicious Chess
[bounty] OverlayFS to Root and Parallels Desktop Escapes
[binary] TPMs and Baseband Bugs
[bounty] Bad Ordering, Free OpenAI Credits, and Goodbye Passwords?
[binary] A Timing Side-Channel for Kernel Exploitation and VR in the wake of Rust
[bounty] Git Config Injection and a Sophos Pre-Auth RCE
[binary] A Ghostscript RCE and a Windows Registry Bug
[bounty] SecurePoint UTM, Chfn, and Docker Named Pipe Vulns
[binary] Glitching the Wii-U and Integer Overflows
[bounty] Pentaho Pre-Auth RCE and Theft by CAN Injection
[binary] A SNIProxy Bug and a Samsung NPU Double Free
[bounty] Bamboozling Bing and a Curl Gotcha
[binary] 200th Episode! Integer Bugs & Synthetic Memory Protections
[bounty] Bypassing CloudTrail and Tricking GPTs
[binary] TOCTOUs in Intel SMM and Shannon Baseband Bugs
[bounty] Popping Azure Web Services and Apollo Config Bugs
[binary] An OpenBSD overflow and TPM bugs
[bounty] Stealing Secrets with Security Advisories and CorePlague
Create your
podcast in
minutes
It is Free
Insight Story: Tech Trends Unpacked
Zero-Shot
Fast Forward by Tomorrow Unlocked: Tech past, tech future
The Unbelivable Truth - Series 1 - 26 including specials and pilot
Lex Fridman Podcast