Ruxmon July

Chaining 3 Bugs to RCE in ServiceNow

Adam Kues - Assetnote

How do you tackle a monolith? This talk details weeks of research culminating in a chain of bugs that takes us from 0 to pre-auth RCE in ServiceNow. Along the way we will talk about HTML sanitizer bypasses, template injection, and sandbox escapes.

———

How North Korea stole USD$41 Million, a first-hand story

Michael McKinnon - Easygo

In September 2023, the world's largest cryptocurrency casino was the victim of a cyber attack perpetrated by North Korea's well-known threat actor group known as Lazarus. Over USD$41 Million was stolen in Ethereum and other related cryptocurrency tokens. Get an inside first-hand look at the technical detail behind the attack, and the incident response involved. We'll discuss how sophisticated (or not) a nation-state adversary can be, and how much (or little) malware and customised payloads were used to accomplish such a thing.