index.html

<!DOCTYPE html>
<html data-html-server-rendered="true" lang="en" data-vue-tag="%7B%22lang%22:%7B%22ssr%22:%22en%22%7D%7D">
  <head>
    <title>Zero Days for Your Day Zero - DAY[0]</title><meta name="gridsome:hash" content="ceb440c5702b23336e25cc45b18d2ba8e6e50683"><meta data-vue-tag="ssr" charset="utf-8"><meta data-vue-tag="ssr" name="generator" content="Gridsome v0.7.13"><meta data-vue-tag="ssr" data-key="viewport" name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover"><meta data-vue-tag="ssr" data-key="format-detection" name="format-detection" content="telephone=no"><meta data-vue-tag="ssr" data-key="description" name="description" content="Reverse Engineering, Exploit Development, and other Security topics."><meta data-vue-tag="ssr" name="title" content="Zero Days for Your Day Zero"><meta data-vue-tag="ssr" name="og:title" content="DAY[0] - Zero Days for Your Day Zero"><meta data-vue-tag="ssr" name="og:image" content="https://dayzerosec.com/zero_square.png"><meta data-vue-tag="ssr" name="og:type" content="website"><meta data-vue-tag="ssr" name="og:url" content="https://dayzerosec.com/"><meta data-vue-tag="ssr" name="og:description" content="A weekly podcast about exploit development, reverse engineering and other security related topics."><link data-vue-tag="ssr" rel="icon" href="data:,"><link data-vue-tag="ssr" rel="icon" type="image/png" sizes="16x16" href="/assets/static/favicon.ce0531f.dc4b6c0d6f91bcea3090579aba64bf2a.png"><link data-vue-tag="ssr" rel="icon" type="image/png" sizes="32x32" href="/assets/static/favicon.ac8d93a.dc4b6c0d6f91bcea3090579aba64bf2a.png"><link data-vue-tag="ssr" rel="icon" type="image/png" sizes="96x96" href="/assets/static/favicon.b9532cc.dc4b6c0d6f91bcea3090579aba64bf2a.png"><link data-vue-tag="ssr" rel="apple-touch-icon" type="image/png" sizes="76x76" href="/assets/static/favicon.f22e9f3.dc4b6c0d6f91bcea3090579aba64bf2a.png"><link data-vue-tag="ssr" rel="apple-touch-icon" type="image/png" sizes="152x152" href="/assets/static/favicon.62d22cb.dc4b6c0d6f91bcea3090579aba64bf2a.png"><link data-vue-tag="ssr" rel="apple-touch-icon" type="image/png" sizes="120x120" href="/assets/static/favicon.1539b60.dc4b6c0d6f91bcea3090579aba64bf2a.png"><link data-vue-tag="ssr" rel="apple-touch-icon" type="image/png" sizes="167x167" href="/assets/static/favicon.dc0cdc5.dc4b6c0d6f91bcea3090579aba64bf2a.png"><link data-vue-tag="ssr" rel="apple-touch-icon" type="image/png" sizes="180x180" href="/assets/static/favicon.7b22250.dc4b6c0d6f91bcea3090579aba64bf2a.png"><link rel="preload" href="/assets/css/0.styles.b61e9212.css" as="style"><link rel="preload" href="/assets/js/app.465862a5.js" as="script"><link rel="preload" href="/assets/js/page--src--pages--index-vue.dda1b496.js" as="script"><link rel="prefetch" href="/assets/js/page--node-modules--gridsome--app--pages--404-vue.2b201ed7.js"><link rel="prefetch" href="/assets/js/page--src--templates--ghost-author-vue.5e61533e.js"><link rel="prefetch" href="/assets/js/page--src--templates--ghost-post-vue.e5dc32f1.js"><link rel="prefetch" href="/assets/js/page--src--templates--ghost-post-vue~page--src--templates--ghost-transcript-vue.155962dc.js"><link rel="prefetch" href="/assets/js/page--src--templates--ghost-tag-vue.6a869f7b.js"><link rel="prefetch" href="/assets/js/page--src--templates--ghost-transcript-vue.458a6de5.js"><link rel="stylesheet" href="/assets/css/0.styles.b61e9212.css"><noscript data-vue-tag="ssr"><style>.g-image--loading{display:none;}</style></noscript>
  </head>
  <body >
    <div id="app" data-server-rendered="true" data-v-51952418><header class="header"><div class="header__left"><!----></div><div class="header__right"></div></header><main class="main"><div class="logo-container hidden-sm-and-up big-logo" data-v-51952418><div class="logo" data-v-51952418><img src="/big-logo.png" data-v-51952418></div></div><div class="logo-container hidden-sm-and-down small-logo" data-v-51952418><div class="logo" data-v-51952418><img src="/big-zero.png" data-v-51952418></div></div><div class="social-links-container " data-v-51952418><div class="social-links"><div class="twitch"><a href="https://twitch.tv/dayzerosec"><img src="/social/twitch.png" alt="Twitch @dayzerosec"></a></div><div class="youtube"><a href="https://youtube.com/c/dayzerosec"><img src="/social/youtube.png" alt="Youtube @dayzerosec"></a></div><div class="twitter"><a href="https://twitter.com/dayzerosec"><img src="/social/twitter.png" alt="Twitter @dayzerosec"></a></div><div class="spotify"><a href="https://open.spotify.com/show/4NKCxk8aPEuEFuHsEQ9Tdt"><img src="/social/spotify.png" alt="Spotify @dayzerosec"></a></div><div class="github"><a href="https://github.com/dayzerosec"><img src="/social/github.png" alt="Github @dayzerosec"></a></div><div class="discord"><a href="https://discord.gg/daTxTK9"><img src="/social/discord.png" alt="DAY[0] Discord"></a></div><div class="RSS"><a href="https://dayzerosec.com/feed.xml"><img src="/social/rss.png" alt="RSS Feed"></a></div></div></div><div class="posts" data-v-51952418><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Episode 43 - Zoom E2E, 15 year old bugs, and killing 20 year old attacks</h2><p class="post-card__description">A quick chat about E2E Crypto and Zoom, followed by a few noteworth exploits including Bluetooth impersonation, a 15-year old qmail CVE, NordVPN, and an RCE in Google. Ending with some mitigation research looking at making singlely linked lists safe, XSS prevention, and Code-Reuse Gadgets.</p><div class="post-meta post-card__meta">
      26 May 2020
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/podcast" class="post-tags__link">
			Podcast
		</a></div><a href="/posts/episode-43" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Adventures of porting MUSL to PS4</h2><p class="post-card__description">Over the last year or so, I've been working with the OpenOrbis team to develop a toolchain for building homebrew for the PS4, and one of the challenges we faced was porting a proper libc to the console. This article dives into some of the interesting lessons learned while porting MUSL to the PS4.</p><div class="post-meta post-card__meta">
      24 May 2020
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/ps4" class="post-tags__link">
			PS4
		</a><a href="/tag/low-level" class="post-tags__link">
			Low-level
		</a></div><a href="/posts/adventures-of-porting-musl-to-ps4" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Episode 42 - iOS 0days are worthless, PrintDemon, and a takeover of hackerone</h2><p class="post-card__description">Are iOS 0days now worthless? Can you hack a satellite...or hackerone? Are WAFs worthwhile? And more on a fairly discussion heavy episode of DAY[0].</p><div class="post-meta post-card__meta">
      19 May 2020
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/podcast" class="post-tags__link">
			Podcast
		</a></div><a href="/posts/episode-42" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Episode 41-  Defcon is canceled, Microsoft was hacked, Rust has vulns</h2><p class="post-card__description">It was a busy week, Microsofts Github account was hacked, Centurylink Routers have no security, and multiple interactionless RCEs in Samsung phones.</p><div class="post-meta post-card__meta">
      12 May 2020
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/podcast" class="post-tags__link">
			Podcast
		</a></div><a href="/posts/episode-41" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Episode 40 - Auth Bypass, XSS, RCE and more</h2><p class="post-card__description">Authentication bypasses, SQL injection, command injection, and more in this web-exploit heavy episode.</p><div class="post-meta post-card__meta">
      5 May 2020
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/podcast" class="post-tags__link">
			Podcast
		</a></div><a href="/posts/episode-40" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Episode 39 - Relyze Decompiler, jQuery XSS, Sandbox Escaping and 0-Click Mail RCE</h2><p class="post-card__description">Since we forgot to cover it when it came out, we look at Relyze's new decompiler that is available on the free version. There is also some sandbox escaping, some crypto issues (AMD's SME/SEV) and even some IBM 0days.</p><div class="post-meta post-card__meta">
      28 April 2020
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/podcast" class="post-tags__link">
			Podcast
		</a></div><a href="/posts/episode-39" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Episode 38 - Binary Ninja's Decompiler, git credential leak, cross-platform LPEs</h2><p class="post-card__description">Zoom vuln worth $500k? Probably not... What is worth $500k? Binary Ninja's new decompiler...okay probably not but it is exciting.We've also got some stupid issues and some interesting LPEs this episode.
</p><div class="post-meta post-card__meta">
      21 April 2020
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/podcast" class="post-tags__link">
			Podcast
		</a></div><a href="/posts/episode-38" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Episode 37 - IDA...Go home, Sandboxie source, and some RCEs (TP-Link, Starcraft 1, OhMyZsh)</h2><p class="post-card__description">Starting off the week with a discussion about the disappointing IDA Home, before moving into a few easy command injections, code-reuse attacks applied to XSS, detecting trojaned hardware and ending with a subtle crypto-bug.</p><div class="post-meta post-card__meta">
      15 April 2020
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/podcast" class="post-tags__link">
			Podcast
		</a></div><a href="/posts/episode-37" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Episode 36 - Zoom-ers, VM Escapes, and Pegasus Resurfaces</h2><p class="post-card__description">First, we talk about Facebook trying to buy some spyware, and then we feast upon a number of Zoom "vulns." Follow that up wtih some interesting vulnerabilities including a hyper-visor Guest-to-host escape, a complicated Safari permissions bypass, and a Gitlab Parser Differential.</p><div class="post-meta post-card__meta">
      8 April 2020
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/podcast" class="post-tags__link">
			Podcast
		</a></div><a href="/posts/episode-36" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Episode 35 - A shortcut (.lnk) to RCE, Pi-Hole, Shadow Stacks, and fine-grained kASLR</h2><p class="post-card__description">Is there a shortcut to RCE? Well, on Windows .LNK files could be just that. We also talk about a few others vulnerabilities impacting Windows, Pi-Hole and Netflix. And end by looking at Window's new hardware enforced Shadow Stack and a proof-of-concept for fine-grained kASLR on Linux.</p><div class="post-meta post-card__meta">
      31 March 2020
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/podcast" class="post-tags__link">
			Podcast
		</a></div><a href="/posts/episode-35" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Episode 34 - Pwn2Own Results, Voatz (again), some web-exploits and a code-reuse mitigation</h2><p class="post-card__description">More discussion about election hacking with Voatz undergoing a more complete security assessment, we also discuss a few interesting web attacks and end with a good discussion about a new code-reuse mitigation: Hurdle.</p><div class="post-meta post-card__meta">
      24 March 2020
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/podcast" class="post-tags__link">
			Podcast
		</a></div><a href="/posts/episode-34" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Episode 33 - How to Hack a CTF and more (LVI, TRRespass and some web-exploits)</h2><p class="post-card__description">Start off by looking at a few Google Cloud attacks, a couple named vulns (LVI: Load Value Injection, and TRRespass) and then into some web-focused exploits including how to hack a CTF.</p><div class="post-meta post-card__meta">
      17 March 2020
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/podcast" class="post-tags__link">
			Podcast
		</a></div><a href="/posts/episode-33" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Learn Exploit Development While Not Dying from COVID-19</h2><p class="post-card__description">With so many countries recommending self-isolation in the past little while we
thought it might be useful to recommend some excellent learning resources to
help enable you make the most of the extra time you might find yourself with.

These are generally solid resources that will also be entertaining and engaging
to work through and a focus on beginner friendly resources.

We've also put out a Youtube video discussing all of these points along with
some side discussion about stuff like whether o</p><div class="post-meta post-card__meta">
      17 March 2020
      <!----><!----></div><div class="post-tags post-card__tags"></div><a href="/posts/learn-exploit-development-while-not-dying-from-covid-19" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Episode 32 - FuzzBench, MediaTek-su, Request Smuggling, and Memory Tagging</h2><p class="post-card__description">A New AMD sidechannel, and an old Intel CSME attack, a couple deserialization attacks, and a few clever but not terribly useful attacks, and some discussion about memory tagging on this weeks episode of DAY[0].</p><div class="post-meta post-card__meta">
      10 March 2020
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/podcast" class="post-tags__link">
			Podcast
		</a></div><a href="/posts/episode-32" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Episode 31 - One-Two-Three Named Vulns (kr00k, Forgot2kEyXCHANGE, GhostCat) and more OpenSMTPD and Samsung Vulnerabilities</h2><p class="post-card__description">Join Specter and zi at they discuss several named vulns (kr00k, Forgot2kEyXCHANGE, GhostCat), the benefits of DNS-over-HTTPS, and a a few vulns in some of our regular targets: Samsung drivers, NordVPN, OpenSMTPd.</p><div class="post-meta post-card__meta">
      3 March 2020
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/podcast" class="post-tags__link">
			Podcast
		</a></div><a href="/posts/episode-31" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Episode 30 - A Dark White-Hat hacker? and various vulns ft. Cisco, Periscope, NordVPN and Tesla/EyeQ</h2><p class="post-card__description">Keeping up our streak, we talk about some vulnerabilities in Cisco, NordVPN and Tesla, and about SlickWraps being hacked by a very dark, white-hat.</p><div class="post-meta post-card__meta">
      25 February 2020
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/podcast" class="post-tags__link">
			Podcast
		</a></div><a href="/posts/episode-30" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Episode #29 - A New PWK/OSCP, Election Hacking, Kernel Exploits, and Fuzzing</h2><p class="post-card__description">Is the new OSCP worth-it? Can election apps be made secure? We'll talk about those questions and several kernel exploits and a few cool fuzzing innovations.</p><div class="post-meta post-card__meta">
      18 February 2020
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/podcast" class="post-tags__link">
			Podcast
		</a></div><a href="/posts/episode-29" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Episode #28 - Hack Twitter, WhatsApp and all your Cisco phones (CDPwn) ft. GhostKnight</h2><p class="post-card__description">Android, Bluetooth, Microsoft, NordVPN, Twitter, WhatsApp, Cisco, vulns for days impacting several big names and a couple new attack ideas, blind regex injection and GhostKnight a technique to breach data integrity using speculative execution.</p><div class="post-meta post-card__meta">
      11 February 2020
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/podcast" class="post-tags__link">
			Podcast
		</a></div><a href="/posts/episode-28" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Episode #27 - Ok Google, sudo ./hacktheplanet</h2><p class="post-card__description">Ok Google! Bypass authentication..and while we're at it, lets explot sudo and OpenSMPTD for root access. This week we dive into various code bases to explore several recent exploits that take advantage of some common yet subtle issues.</p><div class="post-meta post-card__meta">
      4 February 2020
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/podcast" class="post-tags__link">
			Podcast
		</a></div><a href="/posts/episode-27" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Episode 26 - Return of the Zombieload, Bezos Hacked, and other exploits</h2><p class="post-card__description">This week we look at 15 CVEs this week including the new MDS Attacks/Zombieload and GhostImage a cool attack against vision-based classification systems. We also have discussion about mobile vs desktop security.</p><div class="post-meta post-card__meta">
      28 January 2020
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/podcast" class="post-tags__link">
			Podcast
		</a></div><a href="/posts/episode-26" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Episode 25 - Project Verona, CurveBall, CableHaunt, and RCEs-a-plenty</h2><p class="post-card__description">Start off with some discussions about Google, privacy, Rust, and entitlement within open-source software. Then we look at some of the big vulns of the past week including CurveBall, CabelHaunt, and an RDP RCE.</p><div class="post-meta post-card__meta">
      21 January 2020
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/podcast" class="post-tags__link">
			Podcast
		</a></div><a href="/posts/episode-25" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Episode 24 - SHA-mbles, Shitrix, Responsible Disclosure, and wtf is TikTok doing.</h2><p class="post-card__description">Start off with zi fumbling to describe Sha-mbles, but quickly get into our groove as we discuss #Shitrix, Responsible Disclosure, and other exploits.</p><div class="post-meta post-card__meta">
      14 January 2020
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/podcast" class="post-tags__link">
			Podcast
		</a></div><a href="/posts/episode-24" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Episode 23 - First Edge bounty, Hacking Tesla, Cisco advisories, and Shadow Clones</h2><p class="post-card__description">First episode of the decade! First, CCC then some Kali news and all the technical details we can find behind several issues impacting the new Edge browser, Teslas, Cisco DC Network Manager, and others. Ending off with a discussion about a Data-Oriented Programming attack mitigation: Shadow clones.</p><div class="post-meta post-card__meta">
      7 January 2020
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/podcast" class="post-tags__link">
			Podcast
		</a></div><a href="/posts/episode-23" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Episode 22 - PlunderVolt, Real-World Bug Hunting, Presidents Cup CTF, SockPuppet and more</h2><p class="post-card__description">Starting off the episode is a quick review of Real-World Bug Hunting before moving into this week's news and the Plundervolt vulnerability.</p><div class="post-meta post-card__meta">
      17 December 2019
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/podcast" class="post-tags__link">
			Podcast
		</a></div><a href="/posts/episode-22" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Episode 21 - Permanent DoS, HackerOne Hacked, and Wide-OpenBSD</h2><p class="post-card__description">Permanent Android DoS vulnerability, snooping on VPN traffic, value of anti-viruses, contact-less payment vulnerabilities, and more in this episode of DAY[0]</p><div class="post-meta post-card__meta">
      10 December 2019
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/podcast" class="post-tags__link">
			Podcast
		</a></div><a href="/posts/episode-20" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Episode 20 - CWE Top 25, Hacking Anti-Viruses and Adversarial Machine Learning Attacks</h2><p class="post-card__description">In this episode we discuss some recent news regarding encryption laws, and the DHS updating the CWE Top 25 list. Then move into a handful of exploits before ending with some discussions about defending and attacking machine learning systems.</p><div class="post-meta post-card__meta">
      3 December 2019
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/podcast" class="post-tags__link">
			Podcast
		</a></div><a href="/posts/episode-20-cwe-top-25-hacking-anti-viruses-and-adversarial-machine-learning-attacks" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Episode 19 - What Does The NSA Say?</h2><p class="post-card__description">In this episode we discuss a recent NSA advisory regarding best practices for intercepting TLS traffic.  We also take a look at a recent DOM Clobbering (XSS) finding, several VNC exploits, and end with a discussion on fuzzer performance and hardening against power-analysis side channels.</p><div class="post-meta post-card__meta">
      27 November 2019
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/podcast" class="post-tags__link">
			Podcast
		</a></div><a href="/posts/episode-19-what-does-the-nsa-say" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Black Friday for Security Professionals</h2><p class="post-card__description">Plenty of websites are offering deals for Black Friday, these are the places we plan to check out.</p><div class="post-meta post-card__meta">
      25 November 2019
      <!----><!----></div><div class="post-tags post-card__tags"></div><a href="/posts/black-friday-for-security-professionals" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Analyzing Android's CVE-2019-2215 (/dev/binder UAF)</h2><p class="post-card__description">Over the past few weeks, those of you who frequent the DAY[0] streams over on
our Twitch may have seen me working on trying to understand the recent Android
Binder Use-After-Free (UAF) published by Google's Project Zero (p0). This bug is
actually not new, the issue was discovered and fixed in the mainline kernel in
February 2018, however, p0 discovered many popular devices did not receive the
patch downstream. Some of these devices include the Pixel 2, the Huawei P20, and
Samsung Galaxy S7, S8, </p><div class="post-meta post-card__meta">
      8 November 2019
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/exploit-analysis" class="post-tags__link">
			Exploit Analysis
		</a><a href="/tag/android" class="post-tags__link">
			Android
		</a></div><a href="/posts/analyzing-androids-cve-2019-2215-dev-binder-uaf" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Episode 16 - A Bit of everything: 0days, Breaches, Lawsuits, Attacking AI, and some insecure</h2><p class="post-card__description">   </p><div class="post-meta post-card__meta">
      5 November 2019
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/podcast" class="post-tags__link">
			Podcast
		</a></div><a href="/posts/episode-16-a-bit-of-everything-0days-breaches-lawsuits-attacking-ai-and-some-insecure" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Episode 15 - NordVPN Again, Snowden, CPDoS, a PHP-RCE, and some console hacking</h2><p class="post-card__description">   </p><div class="post-meta post-card__meta">
      28 October 2019
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/podcast" class="post-tags__link">
			Podcast
		</a></div><a href="/posts/episode-15-nordvpn-again-snowden-cpdos-a-php-rce-and-some-console-hacking" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Episode 14 - Linux Exploits, Secure Credentials, Side-Channels and Election(SDK) hacking</h2><p class="post-card__description">   </p><div class="post-meta post-card__meta">
      21 October 2019
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/podcast" class="post-tags__link">
			Podcast
		</a></div><a href="/posts/episode-14-linux-exploits-secure-credentials-side-channels-and-election-sdk-hacking" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Episode 13 - When your errors have errors...</h2><p class="post-card__description">   </p><div class="post-meta post-card__meta">
      14 October 2019
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/podcast" class="post-tags__link">
			Podcast
		</a></div><a href="/posts/episode-13-when-your-errors-have-errors" class="post-card__link">Link</a></div></div><div class="post-card content-box" data-v-51952418><div class="post-card__header"><!----></div><div class="post-card__content"><h2 class="post-card__title">Episode 12 - Exploits-galore iOS (checkm8), Android, Signal, Whatsapp, PHP and more</h2><p class="post-card__description">   </p><div class="post-meta post-card__meta">
      7 October 2019
      <!----><!----></div><div class="post-tags post-card__tags"><a href="/tag/podcast" class="post-tags__link">
			Podcast
		</a></div><a href="/posts/episode-12-exploits-galore-ios-checkm8-android-signal-whatsapp-php-and-more" class="post-card__link">Link</a></div></div></div></main><!----><footer class="footer"><span class="footer__copyright">Copyright © 2020 dayzerosec.com </span></footer></div>
    <script src="/assets/js/app.465862a5.js" defer></script><script src="/assets/js/page--src--pages--index-vue.dda1b496.js" defer></script>
  </body>
</html>