PodParley PodParley
PodParley
A Windows Keyhole and Buggy OAuth episode artwork

EPISODE · Dec 2, 2024 · 27 MIN

A Windows Keyhole and Buggy OAuth

from Day[0] · host dayzerosec

A short episode this week, featuring Keyhole which abuses a logic bug in Windows Store DRM, an OAuth flow issue, and a CSRF protection bypass. Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/265.html [00:00:00] Introduction [00:00:16] Attacking Hypervisors From KVM to Mobile Security Platforms [00:02:30] Keyhole [00:10:12] Drilling the redirect_uri in OAuth [00:18:00] Cross-Site POST Requests Without a Content-Type Header [00:24:03] New AMSI Bypss Technique Modifying CLR.DLL in Memory Podcast episodes are available on the usual podcast platforms: -- Apple Podcasts: https://podcasts.apple.com/us/podcast/id1484046063 -- Spotify: https://open.spotify.com/show/4NKCxk8aPEuEFuHsEQ9Tdt -- Google Podcasts: https://www.google.com/podcasts?feed=aHR0cHM6Ly9hbmNob3IuZm0vcy9hMTIxYTI0L3BvZGNhc3QvcnNz -- Other audio platforms can be found at https://anchor.fm/dayzerosec You can also join our discord: https://discord.gg/daTxTK9

Episode metadata supplied by the publisher feed · Published Dec 2, 2024

What this episode covers

A short episode this week, featuring Keyhole which abuses a logic bug in Windows Store DRM, an OAuth flow issue, and a CSRF protection bypass. Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/265.html [00:00:00] Introduction [00:00:16] Attacking Hypervisors From KVM to Mobile Security Platforms [00:02:30] Keyhole [00:10:12] Drilling the redirect_uri in OAuth [00:18:00] Cross-Site POST Requests Without a Content-Type Header [00:24:03] New AMSI Bypss Technique Modifying CLR.DLL in Memory Podcast episodes are available on the usual podcast platforms: -- Apple Podcasts: https://podcasts.apple.com/us/podcast/id1484046063 -- Spotify: https://open.spotify.com/show/4NKCxk8aPEuEFuHsEQ9Tdt -- Google Podcasts: https://www.google.com/podcasts?feed=aHR0cHM6Ly9hbmNob3IuZm0vcy9hMTIxYTI0L3BvZGNhc3QvcnNz -- Other audio platforms can be found at https://anchor.fm/dayzerosec You can also join our discord: https://discord.gg/daTxTK9

PodParley-generated summary based on available episode metadata and transcript content.

NOW PLAYING

A Windows Keyhole and Buggy OAuth

0:00 27:13

No transcript for this episode yet

We transcribe on demand. Request one and we'll notify you when it's ready — usually under 10 minutes.

Share this episode

Similar Episodes

The Hobbit by J. R. R. Tolkien Audiobook, Chapter 19 of 19

Sep 22, 2023 ·20m

The Hobbit by J. R. R. Tolkien Audiobook, Chapter 18 of 19

Sep 22, 2023 ·20m

The Hobbit by J. R. R. Tolkien Audiobook, Chapter 17 of 19

Sep 22, 2023 ·27m

The Hobbit by J. R. R. Tolkien Audiobook, Chapter 16 of 19

Sep 22, 2023 ·14m

The Hobbit by J. R. R. Tolkien Audiobook, Chapter 15 of 19

Sep 22, 2023 ·24m

The Hobbit by J. R. R. Tolkien Audiobook, Chapter 14 of 19

Sep 22, 2023 ·22m

Similar Podcasts

Ask A Spaceman Archives - 365 Days of Astronomy Ask A Spaceman Archives - 365 Days of Astronomy Podcasting Astronomy Every Day of the Year Wild WinsDay Wild WinsDay Pump the hump with WILD WINSday 🐪💪: Your 3-minute weekly video boost for leadership, sales, marketing, and business breakthroughs to WIN the day! Modern Day Modern Day Weekly convos between Emma Lembke and Jules Terpak FEAR NOTHING and Have Lots of Fun with Carlie Lara Wallace carlielara Welcome to The Fear Nothing and Have Lots of Fun Podcast!! We get vulnerable, we have fun, and there’s always a bit of the gospel! These episodes detail all that God is doing in my life right now, and what I’m learning through these experiences. NEW EPISODES come out every Wednesday at 6:05am for those hump day early risers!

Frequently Asked Questions

How long is this episode of Day[0]?

This episode is 27 minutes long.

When was this Day[0] episode published?

This episode was published on December 2, 2024.

What is this episode about?

A short episode this week, featuring Keyhole which abuses a logic bug in Windows Store DRM, an OAuth flow issue, and a CSRF protection bypass. Links and vulnerability summaries for this episode are available at:...

Can I download this Day[0] episode?

Yes, you can download this episode by clicking the download button on the episode player, or subscribe to the podcast in your preferred podcast app for automatic downloads.
URL copied to clipboard!