Discover and read the best of Twitter Threads about #Pwn2Own
Most recents (2)
1. Pick a router, download the firmware, extract the filesystem
2. Search all executables/libraries/scripts for curl -k, wget --no-check-certificate, and variations thereof (curl_easy_setopt etc)
Attackers can intercept those connections
Attackers can intercept those connections
"Der Typ, der die #InternetExplorer-bugs verwaltet..war..30..sah aus wie..60 und meinte: Es kommen..so viele #bugs hier rein! Wir kommen gar nicht dazu, irgendwelche [davon] zu schließen; wir verwalten die nur noch." (21m20s )
#Rot
#Security
#Technology
#Rot
#Security
#Technology
Relevant context: securityintelligence.com/memgc-use-afte…
"At #Pwn2Own 2018, Richard Zhu (fluorescence) [won the] title of #MasterOfPwn. One of his targets was #MicrosoftEdge, which he dispatched using an exploit chain including two Use-After-Free (UAF) vulnerabilities. One of those UAF vulnerabilities is so remarkable that
>
>
