Summer Recap: Phrack, Off-by-One, and RCEs

Day[0]

Content provided by dayzerosec. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by dayzerosec or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://ppacc.player.fm/legal.

7M ago 54:11

MP3•Episode home

In our summer recap, we discuss Phrack's latest issue and talks from the new Off-by-One conference. We also cover some interesting bugs, such as a factorio lua RCE and another RCE via iconv.

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/258.html

[00:00:00] Introduction

[00:01:06] Getting Started with Exploit Development

[00:14:07] Bytecode Breakdown: Unraveling Factorio's Lua Security Flaws

[00:24:35] Iconv, set the charset to RCE: Exploiting the glibc to hack the PHP engine (part 1)

[00:43:29] Off-by-One Conference 2024

Podcast episodes are available on the usual podcast platforms:

-- Apple Podcasts: https://podcasts.apple.com/us/podcast/id1484046063

-- Spotify: https://open.spotify.com/show/4NKCxk8aPEuEFuHsEQ9Tdt

-- Google Podcasts: https://www.google.com/podcasts?feed=aHR0cHM6Ly9hbmNob3IuZm0vcy9hMTIxYTI0L3BvZGNhc3QvcnNz

-- Other audio platforms can be found at https://anchor.fm/dayzerosec

You can also join our discord: https://discord.gg/daTxTK9

281 episodes

#Tech #dayzerosec