Virtual Black Hat Show Daily | Day 2

Hacking the Supply Chain – The Ripple20 Vulnerabilities

Shlomi Oberman

Wednesday, August 5 | 10:00am-10:40am This is the story of how we found and exploited a series of critical vulnerabilities (later named Ripple20) affecting tens or hundreds of millions of IoT devices across all IoT sector conceivable - industrial controllers, power grids, medical, home, networking, transportation, enterprise, retail, defense, and a myriad of other types of IoT devices, manufactured and deployed by the largest American and international vendors in these fields.

Compromising the macOS Kernel through Safari by Chaining Six Vulnerabilities

Yonghwi Jin

Thursday, August 6 | 12:30pm-1:10pm In this talk, we will share our Safari exploit submitted to Pwn2Own 2020. Combining six different vulnerabilities, our exploit successfully compromises the macOS kernel starting from the Safari browser. It breaks every mitigation in macOS including ASLR, DEP, sandbox, and even System Integrity Protection (SIP).

Where Threat Intelligence Meets DNS

Arsenal Track: Malware Defense

Wednesday, August 5 | 12:00pm-1:00pm Vadim Pavlov discusses RpiDNS, a new feature integrated into ioc2rpz.gui which includes an installation script and a web interface to monitor and manage local secure DNS services.

Mole: Out-of-Band Exploitation Framework

Zach Grace

Thursday, August 6 | 11:00am-12:00pm Mole is a new open source framework for identifying and exploiting out-of-band (OOB) application vulnerabilities in applications. Mole provides an all-in-one payload generation framework and callback/payload server that streamlines the OOB payload creation and exploitation processes.