zi0Black

Some neat talks for TumpiCon, more to come!

Hey hackers!
We’ve started sending out the first invites — check your inbox! 👀
Didn’t get one? Take the fast track and submit a talk!

The second edition of TumpiCon is here!
📅 June 27-28, 2025
📍 Somewhere near Turin, Italy
🔒 Invite-only

No flashy stages. No fluff. Just raw, technical, and unfiltered hacking.
More details? If you know, you know.
Follow the trail: tumpicon.org

Project Zero is hiring 🎉

Please share with anyone you think would be great for the team

www.google.com/about/career...

Shielder - Hunting for ~~Un~~authenticated n-days in Asus Routers Notes on patch diffing, reverse engineering and exploiting CVE-2023-39238, CVE-2023-39239, and CVE-2023-39240.

Ever wondered how to binary diff router firmwares to write n-day exploits? Learn how @thezero.org and @suidpit.bsky.social combined unblob, binexport, ghidra, Qiling, and an Asus router to write an exploit for CVE-2023-39238. The outcome was unexpected ... 1/7 www.shielder.com/blog/2024/01...

"You either die a hero, or you live long enough to see yourself become the one doing compliance." - Jonathan Nolan Christopher Nolan, and Me

No fucking way... bugs.chromium.org/p/chromium/i...
XXE in the browser 🫠

Differences between type-C cables
twitter.com/JonBruner/st...