BROADCASTS.com

Published: March 2, 2021, 11 p.m.

b'

This week we talk a bit about newly released Black Hat 2020 and NDSS 2021 presentation videos, before jumping into several pre-auth RCEs, and some interesting exploitation research to bring a PAC enforced Shadow Stack to ARM and an examination of JSON parser interoperability issues.

\\n

\\n[00:00:41] Microsoft open sources CodeQL queries used to hunt for Solorigate activity
\\n

\\n\\t
• https://www.microsoft.com/security/blog/2021/02/25/microsoft-open-sources-codeql-queries-used-to-hunt-for-solorigate-activity/


• https://github.com/github/codeql/pull/5083/commits/5e1e27c2b6b3429623b66531d4fe0b090e70638a

\\n

\\n

\\n

\\n[00:04:16] Black Hat USA 2020
\\n

\\n\\t
• https://www.youtube.com/playlist?list=PLH15HpR5qRsXE_4kOSy_SXwFkFQre4AV_


• https://www.youtube.com/c/NDSSSymposium/search?query=NDSS+2021

\\n

\\n

\\n

\\n[00:13:56] Cookie poisoning leads to DOS and Privacy Violation
\\n

\\n\\t
• https://hackerone.com/reports/1067809

\\n

\\n

\\n

\\n[00:16:37] Unauthorized RCE in VMware vCenter
\\n

\\n\\t
• https://swarm.ptsecurity.com/unauth-rce-vmware/

\\n

\\n

\\n

\\n[00:20:01] A Fifteen-Year-Old RCE Bug Returns in ISC BIND Server [CVE-2020-8625]
\\n

\\n\\t
• https://www.thezdi.com/blog/2021/2/24/cve-2020-8625-a-fifteen-year-old-rce-bug-returns-in-isc-bind-server

\\n

\\n

\\n

\\n[00:25:42] Arbitrary File Write on packagecontrol.io (Sublime Text)
\\n

\\n\\t
• https://bugs.chromium.org/p/project-zero/issues/detail?id=2163

\\n

\\n

\\n

\\n[00:30:31] [Uber] PreAuth RCE on Palo Alto GlobalProtect
\\n

\\n\\t
• https://hackerone.com/reports/540242


• http://blog.orange.tw/2019/07/attacking-ssl-vpn-part-1-preauth-rce-on-palo-alto.html

\\n

\\n

\\n

\\n[00:35:26] The little bug that couldn\'t: Securing OpenSSL
\\n

\\n\\t
• https://github.blog/2021-02-25-the-little-bug-that-couldnt-securing-openssl/

\\n

\\n

\\n

\\n[00:41:49] PACStack: an Authenticated Call Stack
\\n

\\n\\t
• https://www.usenix.org/conference/usenixsecurity21/presentation/liljestrand

\\n

\\n

\\n

\\n[00:56:29] An Exploration of JSON Interoperability Vulnerabilities
\\n

\\n\\t
• https://labs.bishopfox.com/tech-blog/an-exploration-of-json-interoperability-vulnerabilities

\\n

\\n

\\n

\\n[01:03:59] Top 10 web hacking techniques of 2020
\\n

\\n\\t
• https://portswigger.net/research/top-10-web-hacking-techniques-of-2020

\\n

\\n

\\n

\\n[01:05:50] OST 2.0 Beta Spots Open
\\n

\\n\\t
• https://twitter.com/XenoKovah/status/1366224804639031299

\\n

\\n

\\n

Watch the DAY[0] podcast live on Twitch (@dayzerosec) every Monday afternoon at 12:00pm PST (3:00pm EST)

\\n

Or the video archive on Youtube (@dayzerosec)

'