Summer Recap: Phrack, Off-by-One, and RCEs

Day[0]

Inhalt bereitgestellt von dayzerosec. Alle Podcast-Inhalte, einschließlich Episoden, Grafiken und Podcast-Beschreibungen, werden direkt von dayzerosec oder seinem Podcast-Plattformpartner hochgeladen und bereitgestellt. Wenn Sie glauben, dass jemand Ihr urheberrechtlich geschütztes Werk ohne Ihre Erlaubnis nutzt, können Sie dem hier beschriebenen Verfahren folgen https://de.player.fm/legal.

12M ago 54:11

MP3•Episode-Home

In our summer recap, we discuss Phrack's latest issue and talks from the new Off-by-One conference. We also cover some interesting bugs, such as a factorio lua RCE and another RCE via iconv.

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/258.html

[00:00:00] Introduction

[00:01:06] Getting Started with Exploit Development

[00:14:07] Bytecode Breakdown: Unraveling Factorio's Lua Security Flaws

[00:24:35] Iconv, set the charset to RCE: Exploiting the glibc to hack the PHP engine (part 1)

[00:43:29] Off-by-One Conference 2024

Podcast episodes are available on the usual podcast platforms:

-- Apple Podcasts: https://podcasts.apple.com/us/podcast/id1484046063

-- Spotify: https://open.spotify.com/show/4NKCxk8aPEuEFuHsEQ9Tdt

-- Google Podcasts: https://www.google.com/podcasts?feed=aHR0cHM6Ly9hbmNob3IuZm0vcy9hMTIxYTI0L3BvZGNhc3QvcnNz

-- Other audio platforms can be found at https://anchor.fm/dayzerosec

You can also join our discord: https://discord.gg/daTxTK9

282 Episoden

#Tech #dayzerosec