Show Notes

42 - iOS 0days are worthless, PrintDemon, and a takeover of hackerone

00:01:04
[UPDATE] Huawei HKSP Introduces Trivially Exploitable Vulnerability
Additional Links: https://github.com/cloudsec/aksp/blob/master/hksp.patch
00:12:11
iOS one-click chains prices likely to drop
Additional Links: https://www.hackasat.com/
00:33:42
Defcon Quals 2020
Additional Links: https://hxp.io/blog/72/DEFCON-CTF-Quals-2020-notbefoooled/
00:46:45
vBulletin 5.6.1 SQL Injection
00:53:04
Subdomain takeover of resources.hackerone.com
01:01:23
MyLittleAdmin PreAuth RCE
01:06:25
DOM-Based XSS at accounts.google.com by Google Voice Extension.
01:16:59
Playing with GZIP: RCE in GLPI [CVE-2020-11060]
01:36:36
Reverse RDP - The Path Not Taken
01:44:31
PrintDemon: Print Spooler Privilege Escalation, Persistence & Stealth [CVE-2020-1048]
Additional Links: https://twitter.com/VbScrub/status/1260598344650539009
01:53:46
Security Flaws in Adobe Acrobat Reader Allow Malicious Program to Gain Root on macOS Silently
02:00:41
Cloud WAF Comparison Using Real-World Attacks
Additional Links: https://medium.com/fraktal/cloud-waf-comparison-part-2-e6e2d25f558c https://en.wikipedia.org/wiki/Server_Side_Includes
02:18:32
Fuzzing TLS certificates from their ASN.1 grammar
02:22:37
DHS CISA and FBI share list of top 10 most exploited vulnerabilities