Paul's Security WeeklySubscribe

Donut Jokes – Paul’s Security Weekly #584

Full Audio

View Show Index

Segments

1. Wietse Venema & Dan Farmer, SATAN –

Wietse Venema and Dan Farmer, the Developers of Security Administrator Tool for Analyzing Networks (SATAN), talk about their experience as developers, their journey to creating SATAN and their decision to keep SATAN a open source tool.

Full Show Notes: https://wiki.securityweekly.com/Episode584

Hosts

Principal Security Researcher at Eclypsium
Principal Consultant, Team Lead for Research at TrustedSec
Sr. InfoSec Consultant at Online Business Sytems
Product Security Research and Analysis Director at Finite State
Senior Sales Engineer at Barkly

2. Sven Morgenroth, Netsparker

Sven will talk about PHP Object injection vulnerabilities and explain the dangers of PHP's unserialize function. He will show the format of serialized PHP Objects, explain PHP's magic methods and how to write an exploit for a PHP Object Injection vulnerability during his technical demo.

Full Show Notes: https://wiki.securityweekly.com/Episode584 To learn more about Netsparker, go to: https://www.netsparker.com/securityweekly

Hosts

Principal Security Researcher at Eclypsium
Principal Consultant, Team Lead for Research at TrustedSec
Sr. InfoSec Consultant at Online Business Sytems
Product Security Research and Analysis Director at Finite State
Retired Senior Cyber Advisor at Lawrence Livermore National Laboratory
Senior Sales Engineer at Barkly

3. “Dunkin” Donuts, Microsoft, & Marijuana –

Hackers breach Dunkin Donuts, how insiders are serious threats to security in an organization, the return of email flooding, Microsoft helps police shut down fake tech support in India, and how Las Vegas police are cracking down on Black Market marijuana sales!

Full Show Notes: https://wiki.securityweekly.com/Episode584

Hosts

Principal Security Researcher at Eclypsium
Principal Consultant, Team Lead for Research at TrustedSec
Sr. InfoSec Consultant at Online Business Sytems
Product Security Research and Analysis Director at Finite State
Retired Senior Cyber Advisor at Lawrence Livermore National Laboratory
Senior Sales Engineer at Barkly

6. Sven Morgenroth, Netsparker – Paul’s Security Weekly #584

Sven will talk about PHP Object injection vulnerabilities and explain the dangers of PHP's unserialize function. He will show the format of serialized PHP Objects, explain PHP's magic methods and how to write an exploit for a PHP Object Injection vulnerability during his technical demo. Full Show Notes: https://wiki.securityweekly.com/Episode584 To learn more about Netsparker, go to: https://www.netsparker.com/securityweekly Follow us on Twitter: https://www.twitter.com/securityweekly

Related

Stopping The Bad Things – PSW #857

Rob from ThreatLocker comes on the show to talk about how we can disrupt attacker techniques, including Zero Trust, privilege escalation, LOLbins, and evil virtualization. In the news we talk about security appliances and vulnerabilities, rsync vulnerabilities, Shmoocon, hacking devices, and more! This segment is sponsored by ThreatLocker. Visit h...

You can skip this ad in 5 seconds