After Stuxnet: Printing Still the Stairway to Heaven (Q&A)
Peleg Hadar and Tomer Bar discuss Windows Print Spooler architecture, local privilege escalation techniques, and spooler patch testing.
Summary
DEF CON Security Research Presentation
This talk covers technical security topics and vulnerability research. The presentation includes discussion of contemporary security challenges, demonstrations of exploitation techniques, and insights into defensive countermeasures and security best practices.
(AI summary — Claude Haiku)
Related talks
Main Stage·43 min
Jacob Baines
Jacob Baines demonstrates how unprivileged Windows users can install vulnerable, signed third-party printer drivers (BYOVD) to escalate to SYSTEM on fully patched hosts.
Main Stage·31 min
Peleg Hadar · Tomer Bar
Peleg Hadar and Tomer Bar audit the Windows Print Spooler service a decade after Stuxnet, uncovering multiple zero-day SYSTEM privilege escalation bugs.
Main Stage·43 min
Jacob Baines
Abusing Windows print driver installation as a path from low privilege toward SYSTEM.