Pwned by abandonware - Cervoise & Renik 🇫🇷
Channel: Asso HZV
Date: 2023-10-31

Have you ever wanted to play an old DOS/Windows video game on your Linux laptop? It can be done using for example Wine or DosBox, and then downloading .EXE abandonware from public websites. But, did you know that this good oldie could have been quite easily backdoored, in order to get remote code execution on your host computer?

In this talk we will present how an evening, planned to be a travel in time, turned into solving this question: “could someone get access to my Linux host by waterholing old Windows games I download from the Internet?” Both DosBox and Wine will be exposed as potential targets. At the end, a presentation of security mesures you could set up on your Linux box will be exposed. You may even learn how to write an AppArmor profile!

leHACK website: https://www.lehack.org
leHACK's twitter: https://twitter.com/_lehack_
leHACK instagram : https://www.instagram.com/_lehack_/