231 - IOT Issues and DNS Rebinding [Bug Bounty Podcast] | allinfosecnews.com

Dec. 19, 2023, 1 p.m. | DAY[0]

DAY[0] www.youtube.com

A mix of issues this week, not traditionally bounty topics, but there are some lessons that can be applied. First is a feature, turned vulnerability in VS Code which takes a look at just abusing intentional functionality. Several XOS bugs with a web-console. A Sonos Era 100 jailbreak which involves causing a particular call to fail, a common bug path we've seen before, and some discussion about doing fast DNS rebinding attacks against Chrome and Safari.

Links and vulnerability summaries …

abusing bounty bug bug bounty bugs code console dns feature iot jailbreak podcast sonos topics vs code vulnerability web week

More from www.youtube.com / DAY[0]

253 - A Retrospective and Future Look Into DAY[0] 1 week, 2 days ago | www.youtube.com

air bounty change future +5

252 - Bypassing KASLR and a FortiGate RCE [Binary Exploitation Podcast] 1 month, 1 week ago | www.youtube.com

aslr binary binary exploitation bypass +23

251 - RCE'ing Mailspring and a .NET CRLF Injection [Bug Bounty Podcast] 1 month, 1 week ago | www.youtube.com

attack attack chain attacks bounty +16

Future of Exploit Development Follow-up (Episode 250) 1 month, 2 weeks ago | www.youtube.com

corruption development exploit exploit development +9

249 - libXPC to Root and Digital Lockpicking [Bug Bounty Podcast] 1 month, 2 weeks ago | www.youtube.com

android authentication authentication bypass bounty +22

248 - Binary Ninja Free and K-LEAK [Binary Exploitation Podcast] 1 month, 3 weeks ago | www.youtube.com

automated binary binary exploitation binary ninja +13

247 - Hacking Google AI and SAML [Bug Bounty Podcast] 1 month, 3 weeks ago | www.youtube.com

auth authentication authentication bypass automated +25

246 - Rust Memory Corruption??? [Binary Exploitation Podcast] 2 months ago | www.youtube.com

access array binary binary exploitation +21

245 - A PHP and Joomla Bug and some DOM Clobbering [Bug Bounty Podcast] 2 months ago | www.youtube.com

api bounty bug bug bounty +20

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

View on infosec-jobs.com

Security Officer Hospital Laguna Beach

@ Allied Universal | Laguna Beach, CA, United States

View on infosec-jobs.com

Sr. Cloud DevSecOps Engineer

@ Oracle | NOIDA, UTTAR PRADESH, India

View on infosec-jobs.com

Cloud Operations Security Engineer

@ Elekta | Crawley - Cornerstone

View on infosec-jobs.com

Cybersecurity – Senior Information System Security Manager (ISSM)

@ Boeing | USA - Seal Beach, CA

View on infosec-jobs.com

Engineering -- Tech Risk -- Security Architecture -- VP -- Dallas

@ Goldman Sachs | Dallas, Texas, United States

View on infosec-jobs.com