Few discussions this week, from using ASAN for effectively, to vulnerabilities in Rust code, and some discussion about exploiting the OpenSSH double free.

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/188.html

[00:00:00] Introduction

[00:00:31] Spot the Vuln - Too Soft

[00:04:19] One Weird Trick to Improve Bug Finding With ASAN

[00:08:27] Rustproofing Linux (Part 2/4 Race Conditions)

[00:22:39] OpenSSH Pre-Auth Double Free Writeup & PoC [CVE-2023-25136]

[00:34:14] mast1c0re: Part 2 - Arbitrary PS2 code execution

[00:42:39] All about UndefinedBehaviorSanitizer

The DAY[0] Podcast episodes are streamed live on Twitch twice a week:

-- Mondays at 3:00pm Eastern (Boston) we focus on web and more bug bounty style vulnerabilities

-- Tuesdays at 7:00pm Eastern (Boston) we focus on lower-level vulnerabilities and exploits.

We are also available on the usual podcast platforms:

-- Apple Podcasts: https://podcasts.apple.com/us/podcast/id1484046063

-- Spotify: https://open.spotify.com/show/4NKCxk8aPEuEFuHsEQ9Tdt

-- Google Podcasts: https://www.google.com/podcasts?feed=aHR0cHM6Ly9hbmNob3IuZm0vcy9hMTIxYTI0L3BvZGNhc3QvcnNz

-- Other audio platforms can be found at https://anchor.fm/dayzerosec

You can also join our discord: https://discord.gg/daTxTK9

[binary] Rusty Kernel Bugs, mast1c0re, and OpenSSH 45:29 Share

Day[0]

Shownotes Transcript

[binary] Rusty Kernel Bugs, mast1c0re, and OpenSSH