7 Vulns in 7 Days: Breaking Bloatware Faster Than Vendors Can Ship
Demonstrates rapid vulnerability discovery methodologies that uncovered seven zero-day local privilege escalation flaws in pre-installed OEM bloatware.
Summary
The Attack Surface of Pre-Installed OEM Software
Consumer and enterprise laptops ship with pre-installed OEM support tools and diagnostic utilities. These privileged background services frequently introduce critical vulnerabilities.
Rapid Vulnerability Discovery Methodology
Julian Horoszkiewicz outlines a fast-paced auditing approach that uncovered seven separate local privilege escalation vulnerabilities in OEM software suites within a single week.
Exploiting Insecure IPC, Named Pipes, and Services
Common flaw patterns include unauthenticated named pipe commands, DLL hijacking in SYSTEM services, and flawed registry permissions that allow low-privilege users to execute code as NT AUTHORITY\SYSTEM.
Remediation and OEM Supply Chain Hygiene
Eliminating bloatware risks requires hardware vendors to minimize pre-installed software, enforce strict service access control lists, and undergo rigorous third-party security audits prior to device imaging.
Related talks
Main Stage·41 min
Patrick Wardle
macOS security expert Patrick Wardle exposes a local privilege escalation zero-day in Zoom for macOS, gaining root privileges by subverting the auto-updater.
Red Team Village·53 min
Mazin Ahmed
Mazin Ahmed shares the research journey of auditing Zoom during the 2020 pandemic, uncovering security vulnerabilities and reverse engineering client protocols.
Presentations Panels·37 min
Security researchers demonstrate attack surfaces in Adobe Reader's JavaScript engine, dissecting sandbox escapes and exploitation techniques.