[bounty] Attacking OAuth, Citrix, and some P2O Drama

Day[0]

Content provided by dayzerosec. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by dayzerosec or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.

10M ago 52:50

MP3•Episode home

Kicking off the week with a bit of Pwn2Own drama, then taking a look at an OAuth attack against Grammarly and a couple other sites, a fun little polyglot file based attack, and Citrix Bleed, a snprintf information disclosure vulnerability on the web.

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/221.html

[00:00:00] Introduction

[00:01:24] Wyze Cam v3 - Pwn2Own Drama

[00:17:57] Oh-Auth - Abusing OAuth to take over millions of accounts

[00:30:55] Exploiting Healthcare Servers with Polyglot Files [CVE-2023-33466]

[00:41:06] Citrix Bleed: Leaking Session Tokens with CVE-2023-4966

[00:49:25] Hacking a Silent Disco

[00:50:43] DOM-based race condition: racing in the browser for fun

The DAY[0] Podcast episodes are streamed live on Twitch twice a week:

-- Mondays at 3:00pm Eastern (Boston) we focus on web and more bug bounty style vulnerabilities

-- Tuesdays at 7:00pm Eastern (Boston) we focus on lower-level vulnerabilities and exploits.

We are also available on the usual podcast platforms:

-- Apple Podcasts: https://podcasts.apple.com/us/podcast/id1484046063

-- Spotify: https://open.spotify.com/show/4NKCxk8aPEuEFuHsEQ9Tdt

-- Google Podcasts: https://www.google.com/podcasts?feed=aHR0cHM6Ly9hbmNob3IuZm0vcy9hMTIxYTI0L3BvZGNhc3QvcnNz

-- Other audio platforms can be found at https://anchor.fm/dayzerosec

You can also join our discord: https://discord.gg/daTxTK9

254 episodes

#Tech #dayzerosec