▶

Analyzing Stuxnet's zero-day exploits

basti0007 · Talk · 1 h 15 min · 2010 · YouTube title: 27C3: Adventures in analyzing Stuxnet (Bruce Dang from Microsoft)
Why it's here

HN recommends it as the definitive technical deep dive into Stuxnet's zero-days from someone who analyzed it first-hand.

What it covers

Bruce Dang of Microsoft gives a 27C3 talk on how the Stuxnet vulnerabilities were found and analyzed. He walks through the techniques used to triage them and the details of each zero-day exploit, down to the opcode level.