Open Sesame - Picking Locks with Cortana
Explore the "Open Sesame" vulnerability in Cortana, a critical security flaw allowing attackers to compromise locked Windows machines and execute arbitrary code. Delve into the attack model, demonstrating how adversaries can access sensitive files, browse websites, download and run executables, and potentially gain elevated privileges. Learn about Cortana's architecture, including the audio and semantic processing phases, and various attack vectors such as the "Voice of Esau" attack and "Skill of Death." Gain insights into defending against voice attacks and understand key takeaways for both defenders and security professionals. This 46-minute Black Hat conference presentation covers the full scope of the vulnerability, from discovery to exploitation, and provides valuable information for cybersecurity experts and Windows users alike.