GreHack 2023: 11th International Symposium on Research in Grey-Hat Hacking
Grenoble's grey-hat hacking symposium, mixing academic and offensive research: exploiting the Tesla Model 3, hypervisor attack surface, Google Apps Script abuse, argument injection in command-line tools, Kubernetes micro-service pentesting and an Ubuntu shiftfs kernel exploit.
- Google Apps Script - This Talk Requires Access to Your E-mails — Nicolas Kovacs, Sébastien Rolland
This talk, presented by Nicolas Kovacs and Sébastien Rolland of Quarkslab at GreHack, delves into the often-overlooked security implications of Google Apps Script (GAS). While designed as a powerful…
- Virtualization from an Attacker Point-Of-View — Corentin Bayet, Thomas Bouzerar
This talk, "Virtualization from an Attacker Point-Of-View," delivered by Corentin Bayet of Synacktiv at GreHack, delves into the intricate world of hypervisors and their associated attack surfaces…
- Vulnerability in the QR Code of the Izly Phone Application — Clément Gindrier
In this GreHack talk, independent security researcher Clément Gindrier details a critical vulnerability he discovered and reported in the Izly mobile payment application. Izly, developed by Experian…
- Unlocking the Drive: Exploiting Tesla Model 3 — David Berard, Vincent Dehors
In this highly technical talk at GreHack, David Berard and Vincent Dehors from Synacktiv unveiled the intricate multi-stage exploit chain they developed to compromise a Tesla Model 3. Their…
- System Introspection Applied to Micro-Services Pentests in K8S Clusters — Laluka, Christophe Biguereau
In the rapidly evolving landscape of cloud-native applications, securing microservice architectures deployed on Kubernetes (K8s) clusters presents unique and formidable challenges for security…
- Won't You Please, Please --help Me? — Thomas Chauchefoin
In his GreHack talk, "Won't You Please, Please --help Me?", Thomas Chauchefoin, a Vulnerability Researcher at Sonar, shed light on a critical yet often misunderstood class of vulnerabilities…
- Ubuntu Shiftfs: Unbalanced Unlock Exploitation Attempt (CVE-2023-2612) — Jean-Baptiste Cayrou
In this GreHack talk, Jean-Baptiste Cayrou, a security researcher at Synacktiv, delves into a critical kernel vulnerability (CVE-2023-2612) he discovered in Ubuntu's Shiftfs filesystem. Titled…