thezero

Security Researcher and Senior Penetration Tester at Shielder.
In the office I’m the one with the soldering iron.

20/04/2020

Security analysis of the SmartConfig procol by Espressif and publishing of the NotSoSmartConfig tool, able to retrieve WiFi credentials from a PCAP.

Min

24/10/2019

The LSP4XML library used by many IDE and editors was affected by an XXE which lead to RCE exploitable by just opening an XML file.

Min

19/10/2019

OpenStack was using an old version of noVNC affected by a DOM-based XSS that allowed attackers to steal VM tokens and take over VMs.

Min

08/03/2019

Release of WebTech, a tool for RECON during Penetration Tests that scan websites and identify technologies and frameworks in use.

Min

04/02/2019

Writeup for the FridaLab challenge with a basic introduction to the Frida toolkit on Android.

Min