BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.ringzer0.training//ringzer0-bootstrap24-austin//spea
 ker//LYLLNU
BEGIN:VTIMEZONE
TZID:CST
BEGIN:STANDARD
DTSTART:20001029T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10;UNTIL=20061029T080000Z
TZNAME:CST
TZOFFSETFROM:-0500
TZOFFSETTO:-0600
END:STANDARD
BEGIN:STANDARD
DTSTART:20071104T030000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=11
TZNAME:CST
TZOFFSETFROM:-0500
TZOFFSETTO:-0600
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000402T030000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=4;UNTIL=20060402T090000Z
TZNAME:CDT
TZOFFSETFROM:-0600
TZOFFSETTO:-0500
END:DAYLIGHT
BEGIN:DAYLIGHT
DTSTART:20070311T030000
RRULE:FREQ=YEARLY;BYDAY=2SU;BYMONTH=3
TZNAME:CDT
TZOFFSETFROM:-0600
TZOFFSETTO:-0500
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-ringzer0-bootstrap24-austin-EAXQYM@cfp.ringzer0.training
DTSTART;TZID=CST:20240223T203000
DTEND;TZID=CST:20240223T211500
DESCRIPTION:Increasingly threat actors are moving off of Windows endpoints 
 and into places less visible like appliances. An analysis of CISA’s Know
 n Exploited Vulnerabilities from 2023\, and recent years\, reveals that th
 reat actors are targeting and exploiting appliances with both known vulner
 abilities and 0-days of their own.\n\nThis talk covers the vulnerability r
 esearch process used to discover 16 vulnerabilities across three different
  security appliances in the Fortinet product line. From command injection\
 , SQLi\, file reads\, and more\, this journey started what I dubbed the 
 “Forti Forty”\, a goal (cut short) to find 40 CVE’s in Fortinet appl
 iances. \n\nAttendees can expect to walk away with a general overview of h
 ow to approach reverse engineering security appliances\, methodology used 
 in reviewing large systems and code bases\, and the common pitfalls that d
 evelopers make in these complex systems.
DTSTAMP:20260615T080706Z
LOCATION:Bootloader 📍Under The Oaks
SUMMARY:Rust Won't Save Us: Finding and Exploiting 0-days in Security Appli
 ances - Zach Hanley
URL:https://cfp.ringzer0.training/ringzer0-bootstrap24-austin/talk/EAXQYM/
END:VEVENT
END:VCALENDAR