Keeping up our streak, we talk about some vulnerabilities in Cisco, NordVPN and Tesla, and about SlickWraps being hacked by a very dark, white-hat.

• [00:02:32] Humble Book Bundle: Cybersecurity 2020 by Wiley

• [00:11:31] Google Summer of Code 2020

  • https://radare.org/gsoc/2020/
  • [00:23:01] Critical Issue In ThemeGrill Demo Importer
  • [00:28:48] Cisco Security Advisory: Cisco Smart Software Manager On-Prem Static Default Credential Vulnerability
  • [00:32:19] nordvpn Linux Desktop executable application does not use pie / no ASLR
  • [00:40:57] Race condition (TOCTOU) in NordVPN can result in local privilege escalation
  • [00:49:17] Periscope android app deeplink leads to CSRF in follow action

  • [00:54:01] I hacked SlickWraps. This is how. - Lynx0x00 - Medium

  • https://files.catbox.moe/fxn9r2.pdf

  • [01:10:23] Model Hacking ADAS to Pave Safer Roads for Autonomous Vehicles
  • [01:18:31] Edge CVE-2020-0767 RCE POC
  • [01:22:02] GadgetProbe: Exploiting Deserialization to Brute-Force the Remote Classpath
  • [01:28:37] CopyCat: Controlled Instruction-Level Attacks on Enclaves for Maximal Key Extraction
  • [01:37:31] MEUZZ: Smart Seed Scheduling for Hybrid Fuzzing
  • [01:49:36] pwn.college BETA
  • [01:53:17] Microcontroller Readback Protection: Bypasses and Defenses
  • [01:54:00] Libxml2 Tutorial | AFLplusplus

  • [01:56:06] Booting iOS on QEMU Research Slides

  • https://github.com/alephsecurity/confs/blob/master/OFFENSIVE20/offensive-20-ios-qemu.pdf

  • https://github.com/alephsecurity/xnu-qemu-arm64

Watch the DAY[0] podcast live on Twitch (@dayzerosec) every Monday afternoon at 12:00pm PST (3:00pm EST)

Or the video archive on Youtube (@DAY[0])