35 - A shortcut (.lnk) to RCE, Pi-Hole, Shadow Stacks, and fine-grained kASLR

31 March 2020

Show Notes

35 - A shortcut (.lnk) to RCE, Pi-Hole, Shadow Stacks, and fine-grained kASLR

The Netflix account compromise Bugcrowd doesn't want you to know about

Additional Links: https://bugcrowd.com/netflix

Where is my Train : Tracking to Hacking

Intel SGX removed from Rocket Skylake-S CPUs

Type 1 Font Parsing Remote Code Execution Vulnerability

Configuration Overwrite in IBM Cognos TM1 [CVE-2019-4716]

Remote Code Execution Through .LNK Files [CVE-2020-0729]

Pi-hole Remote Code Execution [CVE-2020-8816]

NordVPN - Unauthorized User Can Delete Any User Account

Smart Contracts Inside SGX Enclaves: Common Security Bug Patterns

Additional Links: https://blockchain-ctf.securityinnovation.com/#/

Understanding Hardware-enforced Stack Protection

Additional Links: https://windows-internals.com/cet-on-windows/

[RFC PATCH 00/11] Finer grained kernel address space randomization - Kristen Carlson Accardi

Additional Links: https://www.kryptoslogic.com/blog/2020/03/another-look-at-two-linux-kaslr-patches/

Additional Links: https://www.reddit.com/r/netsec/comments/fr8w8u/free_vpn_access_to_slayer_labs_networks/?sort=top