BROADCASTS.com

Is the new OSCP worth-it? Can election apps be made secure? We'll talk about those questions and several kernel exploits and a few cool fuzzing innovations.

\n
• [00:00:23] PWK and the OSCP Certification | Offensive Security

\n
• [00:16:24] Rescheduling Root KSK Ceremony 40

\n
• [00:20:15] The Ballot is Busted Before the Blockchain:A Security Analysis of Voatz

\n
• https://blog.voatz.com/?p=1209

\n
• [00:49:26] Lateral movement via MSSQL: a tale of CLR and socket reuse

\n
• [00:55:51] Fix for CVE-2018-12122 can be bypassed via keep-alive requests

\n
• [01:00:28] A Trivial Privilege Escalation Bug in Windows Service Tracing (CVE-2020-0668)

\n
• https://googleprojectzero.blogspot.com/2018/08/windows-exploitation-tricks-exploiting.html

\n
• [01:05:01] Intel CSME Escalation of Privilege

\n
• [01:07:41] Project Zero: A day^W^W Several months in the life of Project Zero

\n
• [01:18:54] Project Zero: Mitigations are attack surface, too

\n
• https://packetstormsecurity.com/files/156316/Samsung-Kernel-PROCA-Use-After-Free-Double-Free.html

\n
• [01:33:42] Samsung SEND_FILE_WITH_HEADER Use-After-Free

\n
• [01:35:52] Samsung /dev/tsmux Heap Out-Of-Bounds Write

\n
• [01:39:55] Exploiting a Linux kernel vulnerability in the V4L2 subsystem (CVE-2019-18683)

\n
• [01:45:10] KOOBE: Towards Facilitating Exploit Generation of Kernel Out-Of-Bounds Write Vulnerabilities

\n
• [01:54:06] HotFuzz: Discovering Algorithmic Denial-of-Service Vulnerabilities Through Guided Micro-Fuzzing

\n
• [01:58:14] HYPER-CUBE: High-Dimensional Hypervisor Fuzzing

\n
• [02:02:21] FIDO2 Deep Dive: Attestations, Trust model and Security

\n
• [02:03:04] Hypervisor Necromancy; Reanimating Kernel Protectors

\n

Watch the DAY[0] podcast live on Twitch (@dayzerosec) every Monday afternoon at 12:00pm PST (3:00pm EST)

Or the video archive on Youtube (@DAY[0])