BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//bsides-joburg-2026//speaker//ZZS9UN
BEGIN:VTIMEZONE
TZID:Africa/Johannesburg
BEGIN:STANDARD
DTSTART:20250725T000000
TZNAME:SAST
TZOFFSETFROM:+0200
TZOFFSETTO:+0200
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
SUMMARY:Pipe Dreams: Escalating to SYSTEM via Cooler Master MasterPlus - T
 yron Kemp
DTSTART;TZID=Africa/Johannesburg:20260725T150500
DTEND;TZID=Africa/Johannesburg:20260725T155000
DTSTAMP:20260726T032852Z
UID:pretalx-bsides-joburg-2026-YHKD9B@pretalx.com
DESCRIPTION:Every gaming peripheral that ships to your desk comes bundled 
 with software running silently as NT AUTHORITY\\SYSTEM. These OEM utilitie
 s are trusted\, rarely audited\, and almost never patched.\n\nIn this talk
  I walk through the discovery and exploitation of a local privilege escala
 tion vulnerability in Cooler Master MasterPlus. A  peripheral management s
 uite installed on millions of Windows machines. The root cause is an unaut
 henticated named pipe exposed by MPService.exe (SYSTEM). Any standard loca
 l user can connect\, send a single JSON payload\, and execute arbitrary co
 mmands as SYSTEM with no admin rights\, no user interaction\, and no race 
 condition required.\n\nI'll cover the full methodology: service enumeratio
 n\, pipe discovery\, Ghidra static analysis\, dynamic confirmation\, and a
  working proof-of-concept.
LOCATION:Track 1
URL:https://pretalx.com/bsides-joburg-2026/talk/YHKD9B/
END:VEVENT
END:VCALENDAR