[๖ۣۜCriminal]

Welcome to series 2 on the untapped attack surface

What is Bloatware?
Programs preinstalled by your OEM

What is an OEM?
This is your computer manufacturer be it Dell, HP, Asus, Lenovo, etc

Whats so interesting about bloatware?
OEM exclusive bloatware mainly the non third party bloatware such as dell system detect as an example tend to be vulnerable to things like local priv escalating, information disclosure and other serious vulns.

By figuring out a good method to fingerprint computer models, you can mirror the targets environment by installing the same bloatware, reverse the binarys and hopefully find interesting things, network protocols are good to look into as well see if httpd's or what not get started on localhost on random ports so nmap can come in handy for this as well as windbg.

Hope you guys learned something new about this untapped attack surface.

[Mi2414]

I'm surprised bloatware is still around, I hate getting computers for repair or malware removal and I still see they have it all the bloatware installed. Very annoying if you ask me.

[LogoiLab]

SuperFish was fun while it lasted.

[๖ۣۜCriminal]

SuperFish was fun while it lasted.

Superfish was pretty much the reason lenovo got compromised since it made people furious, their domain registrar account was taken and alot of executives emails were jacked but it definitely caused a huge fiasco so people need to understand bloatware tends to be problematic and security is almost never a priority for them.

[CichyCichoCiemny]

Well, you didn't really explain anything.
Quality method tho.

🤝

[๖ۣۜCriminal]

Well, you didn't really explain anything.
Quality method tho.

🤝

Not much to explain may edit in more indepth stuff later, It's mainly about bloatware and why people should look into them because people don't realize they have more of a use then just taking up HDD space.

[milanyobs]

Those kind of info can be used for targeting people
SE is required sometimes