BROADCASTS.com

Published: Dec. 8, 2020, 11 p.m.

Some solid exploit development talk in this episode as we look at an iOS vuln, discuss the exploitability of a cURL buffer overflow and examine a new kernel UAF mitigation.

\n

\n[00:00:43] Improving open source security during the Google summer internship program
\n

\n\t
• https://security.googleblog.com/2020/12/improving-open-source-security-during.html

\n

\n

\n

\n[00:03:35] Justices seem wary of breadth of federal computer fraud statute
\n

\n\t
• https://www.scotusblog.com/2020/12/argument-analysis-justices-seem-wary-of-breadth-of-federal-computer-fraud-statute/

\n

\n

\n

\n[00:11:37] Update regarding Snapchat SSRF
\n

\n\t
• https://hackerone.com/reports/530974

\n

\n

\n

\n[00:12:53] A 3D Printed Shell
\n

\n\t
• https://www.securifera.com/blog/2020/12/02/a-3d-printed-shell/

\n

\n

\n

\n[00:20:19] Site Wide CSRF on Glassdoor
\n

\n\t
• https://blog.witcoat.com/2020/12/03/site-wide-csrf-on-glassdoor/

\n

\n

\n

\n[00:24:24] [GitLab] Stored-XSS in error message of build-dependencies
\n

\n\t
• https://hackerone.com/reports/950190

\n

\n

\n

\n[00:27:44] Playstation Now RCE
\n

\n\t
• https://hackerone.com/reports/873614

\n

\n

\n

\n[00:32:29] MS Teams RCE (Important, Spoofing)
\n

\n\t
• https://github.com/oskarsve/ms-teams-rce/

\n

\n

\n

\n[00:38:34] An iOS zero-click radio proximity exploit odyssey
\n

\n\t
• https://googleprojectzero.blogspot.com/2020/12/an-ios-zero-click-radio-proximity.html


• https://bugs.chromium.org/p/project-zero/issues/detail?id=1982

\n

\n

\n

\n[00:54:58] [curl] heap-based buffer overrun in /lib/urlapi.c
\n

\n\t
• https://hackerone.com/reports/547630

\n

\n

\n

\n[01:02:51] Google Duo: Race condition can cause callee to leak video packets from unanswered call
\n

\n\t
• https://bugs.chromium.org/p/project-zero/issues/detail?id=2085

\n

\n

\n

\n[01:05:35] Linux kernel heap quarantine versus use-after-free exploits
\n

\n\t
• https://a13xp0p0v.github.io/2020/11/30/slab-quarantine.html


• https://lore.kernel.org/kernel-hardening/CAG48ez1tNU_7n8qtnxTYZ5qt-upJ81Fcb0P2rZe38ARK=iyBkA@mail.gmail.com/T/#u

\n

\n

\n

\n[01:13:23] Hey Alexa what did I just type? Decoding smartphone sounds with a voice assistant
\n

\n\t
• https://arxiv.org/abs/2012.00687

\n

\n

\n

\n[01:22:57] XS-Leaks Wiki
\n

\n\t
• https://xsleaks.dev/


• https://security.googleblog.com/2020/12/fostering-research-on-new-web-security.html

\n

\n

\n

\n[01:27:14] Hacking 101 by No Starch Press
\n

\n\t
• https://www.humblebundle.com/books/hacking-101-no-starch-press-books

\n

\n

\n

\n[01:33:40] Gamozo Labs FuzzOS
\n

\n\t
• https://gamozolabs.github.io/fuzzing/2020/12/06/fuzzos.html

\n

\n

\n

Watch the DAY[0] podcast live on Twitch (@dayzerosec) every Monday afternoon at 12:00pm PST (3:00pm EST)

\n

Or the video archive on Youtube (@dayzerosec)