Exploring the New World : Remote Exploitation of SQLite and Curl
summary
Fuzzing plus manual auditing uncovers multiple real-world bugs: Magellan (CVE-2018-20346, CVE-2018-20505, CVE-2018-20506) is three SQLite heap overflows/data disclosures exploitable via FTS shadow-table blobs, and Dias (CVE-2018-16890, CVE-2019-3822) are a curl NTLM client memory leak (up to ~64KB per request) and a stack overflow in NTLM type-3 handling. Proof-of-concept chains achieve remote information leaks and practical remote code execution against Chrome/Google Home/Chromium-based targets; vendor patches follow disclosure.
AI-written summary · about
chapters (8)
- 0:00Introduction and agenda
- 3:03Target identification
- 4:27Vulnerability discovery
- 10:42Vulnerability analysis
- 18:40NTLM protocol analysis
- 24:54Exploiting Google Home
- 38:49Developer server attacks
- 43:55Conclusion and defenses
related talks
01h 16mClassic Vulnerabilities
01h 02mPrompt-Jacking: The Rise of a New Supply Chain Risk
39mExploiting Blind Memory Corruption in Cloud Services
51mNew Exploit Technique In Java Deserialization Attack
01h 05mClassic Vulnerabilities
44mExposing Critical Threats In Millions Of Connected Devices
42mThe Hidden RCE Surfaces That Control the Droids
50mModern WebApp Vulnerabilities