Thursday Afternoon Keynote

No ratings

Presented at GrrCON Cyber Security Summit and Hacker Conference 2023 by

Zach Hanley

James Horseman

Join Chief Attack Engineer Zach Hanley and Exploit Developer James Horseman for an eye-opening keynote session where they’ll discuss in detail how the hacker mindset can be applied to seemingly daunting tasks in order to make them more approachable. Zach and James will show how they approached their first Pwn2Own contest and how they discovered a command injection RCE vulnerability affecting nearly every Lexmark printer. They’ll also share why they think it went unnoticed in previous research and why current open-source static analysis tools can miss this simple bug. Finally, they’ll release the exploit POC and an additional POC to dump credentials during engagements.