Conference recordings are now online!

Conference recordings are now online!

We've highlighted a few talks worth checking out:

• GNOME and Beyond Dream Tour: Discover Linux Desktop Sandboxing and More Through Its Vulnerabilities. The talk covers more than 14 vulnerabilities in GNOME components, Flatpak, and LibreOffice. These include a Flatpak sandbox escape caused by improper handling of symbolic links, allowing a sandboxed application to access the host’s D-Bus.

• Ghost in the SIM: Silent, Zero-Click, Over-the-Air Exploitation of a Pixel 9 Baseband OOB Read. The researchers adapted FirmWire, a framework for emulating and fuzzing modem firmware, to analyze the Pixel 9 modem. They discovered two denial-of-service flaws and an out-of-bounds write vulnerability.

• Cash, Card or Root? Security Archaeology of a Fiscal Cash Register. The authors show how unauthenticated XML file writes combined with the execution of a maintenance script lead to command execution as root on a fiscal cash register. The talk also covers tampering with communication to the fiscal module and a hardware bypass of its protections.

• Chain Reaction - From Isolated Vulnerabilities to Full System Compromise. The talk presents a penetration test of an unnamed web platform with 30 million users. A regular user account could invoke administrative API methods, while a secret in client-side JavaScript was used to obtain active session tokens. Reusing those tokens together with CORS and WAF misconfigurations exposed passwords and JWT and OAuth secrets.

• Imagine: Pwning Your Favourite Nintendo DS Game! While reverse engineering Imagine: Figure Skating, the author discovered an out-of-bounds read and a buffer overflow when the character name was copied. A crafted save file overwrites a function pointer and enables arbitrary code execution on the Nintendo DS.