205 - SecurePoint UTM, Chfn, and Docker Named Pipe Vulns [Bug Bounty Podcast]

For this week's bug bounty podcast We start off with a bit of a unique auth bypass in a firewall admin panel. We've also got a couple desktop-based software bugs, with a Docker Desktop privilege escalation on windows, and a chfn bug. We've also got a couple escalation techniques, one for Azure environments, and another trick for exploiting semi-controlled file-writes.

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/205.html

[00:00:00] Introduction
[00:00:32] SecurePwn Part 1: Bypassing SecurePoint UTM’s …

abusing auth authentication azure bounty bug bug bounty bugs bypass bypassing cve desktop docker environments escalation etc exploiting firewall introduction linux panel podcast privilege privilege escalation securepoint software start techniques utm vulns windows