Fingerprinting Exploit Devs, BLURtooth and Punking Punkbuster

Every wondering how you might fingerprint and trace exploit devs in the wild? Wondered what a backdoor in a D-Link router looks like? Want to hack Facebook (for Android)? We have all of that and more!

• [00:00:43] Google: Android Partner Vulnerability Initiative
  
  • https://bugs.chromium.org/p/apvi/issues/list?q=&can=1
  
  
• [00:02:55] Project Zero: Announcing the Fuzzilli Research Grant Program
  
• [00:08:40] GitHub: Code scanning is now available
  
• [00:16:39] Hunting for exploits by looking for the author's fingerprints
  
• [00:22:26] Forcing Firefox to Execute XSS Payloads during 302 Redirects
  
• [00:27:10] Exploiting fine-grained AWS IAM permissions for total cloud compromise
  
  • https://medium.com/bugbountywriteup/aws-iam-explained-for-red-and-blue-teams-2dda8b20fbf7
  
  
• [00:38:04] BLURtooth (the BLUR attacks)
  
• [00:44:25] Arbitrary code execution on Facebook for Android
  
• [00:51:44] [stripo] Public and secret api key leaked in JavaScript source
  
• [01:00:14] [GitLab] Unvalidated Oauth email results in accounts takeovers on 3rd parties
  
• [01:06:03] Hacking Grindr Accounts with Copy and Paste
  
• [01:16:37] Exploiting Other Remote Protocols in IBM WebSphere
  
  • https://portswigger.net/web-security/deserialization/exploiting
  
  
• [01:25:57] The Anatomy of a Bug Door: Dissecting Two D-Link Router Authentication Bypasses
  
• [01:38:36] Hacking Punkbuster.
  
• [01:43:26] Race Condition in handling of PID by apport [CVE-2020-15702]
  
• [01:57:24] Hardware Hacking Experiments
  
• [01:59:11] How I automated McDonalds mobile game to win free iPhones
  
• [01:59:42] Voyager - A Hyper-V Hacking Framework For Windows 10 x64 (AMD & Intel)
  
• [02:00:28] zznop/sploit: Go package that aids in binary analysis and exploitation
  

Watch