2025年5月12日

关于这一集

Exploiting VS Code with Control Characters

A quick episode this week, which includes attacking VS Code with ASCII control characters, as well as a referrer leak and SCIM hunting.

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/282.html

[00:00:00] Introduction

[00:00:57] Attacking Hypervisors - Training Update

[00:06:20] Drag and Pwnd: Leverage ASCII characters to exploit VS Code

[00:12:12] Full Referer URL leak through img tag

[00:17:52] SCIM Hunting - Beyond SSO

[00:25:17] Breaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach Messages

Podcast episodes are available on the usual podcast platforms:

-- Apple Podcasts: https://podcasts.apple.com/us/podcast/id1484046063

-- Spotify: https://open.spotify.com/show/4NKCxk8aPEuEFuHsEQ9Tdt

-- Google Podcasts: https://www.google.com/podcasts?feed=aHR0cHM6Ly9hbmNob3IuZm0vcy9hMTIxYTI0L3BvZGNhc3QvcnNz

-- Other audio platforms can be found at https://anchor.fm/dayzerosec

You can also join our discord: https://discord.gg/daTxTK9

科技

英语

美国

使用 API 获取 JSON 中的这一集

文字稿 🔗

Are you the producer of this podcast? Add a podcast transcript

Need Audio-to-Text? Transcribe with Listen411 in Just 60 Seconds

搜索以前的节目

搜索Day[0]以前的节目。

把搜索框内嵌到你的网站上

本播客中的其他单集

ZDI's Triaging Troubles and LibreOffice Exploits

2025年2月25日

We discuss an 0day that was dropped on Parallels after 7 months of no fix from the vendor, as well as ZDI's troubles with responses to researchers and reproducing bugs. Also included are a bunch of filesystem issues, and an insanely technical linux kernel exploit chain. Links and vulnerability s...

00:57:02

保存

剪辑

Recycling Exploits in MacOS and Pirating Audiobooks

2025年2月18日

We cover a comical saga of vulnerabilities and variants from incomplete fixes in macOS, as well as a bypass of Chrome's miraclePtr mitigation against Use-After-Frees (UAFs). We also discuss an attack that abuses COM hijacking to elevate to SYSTEM through AVG Antivirus, and a permissions issue tha...

01:17:06

保存

剪辑

Unicode Troubles, Bypassing CFG, and Racey Pointer Updates

2025年2月4日

On the web side, we cover a portswigger post on ways of abusing unicode mishandling to bypass firewalls and a doyensec guide to OAuth vulnerabilities. We also get into a Windows exploit for a use-after-free in the telephony service that bypasses Control Flow Guard, and a data race due to non-atom...

00:41:29

保存

剪辑

Path Confusion and Mixing Public/Private Keys

2025年3月3日

This week's episode features a variety of vulnerabilities, including a warning on mixing up public and private keys in OpenID Connect deployments, as well as path confusion with an nginx+apache setup. Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/pod...

00:59:34

保存

剪辑

Top 10 Web Hacking Techniques and Windows Shadow Stacks

2025年2月12日

In this episode, we discuss the US government discloses how many 0ds were reported to vendors in a first-ever report. We also cover PortSwigger's top 10 web hacking techniques of 2024, as well as a deep dive on how kernel mode shadow stacks are implemented on Windows by Connor McGarr. Links and ...

01:12:42

保存

剪辑