Cyber Attack Explained: Zero-Days in FortiClient VPN

This webinar walks through the discovery and exploitation story behind two vulnerabilities in a VPN client, starting from an investigation into Windows named pipes. It explains IPC concepts, named pipes, and ACLs, then shows how overly permissive permissions combined with a SYSTEM-privileged service created conditions for local privilege escalation. It demonstrates reverse engineering of pipe communication, bypassing custom barriers via process injection, and abuse of configuration restore functionality to change settings and suppress certificate warnings. It also covers a second issue involving encrypted pipe communication weakened by a hard-coded key recoverable through reverse engineering, and ends with mitigation steps and broader lessons for secure design.