nico

426 posts

nico

@ndaprela

Pentester and Security Researcher

Italy Katılım Nisan 2016

26 Takip Edilen190 Takipçiler

nico retweetledi

Shielder@ShielderSec·5d

Can a hostile container sneak past your eBPF tracing? Sometimes, yes. With @OSTIFofficial & @CloudNativeFdn we audited Inspektor Gadget - 3 vulns (fixed), 6 hardenings, 6 bypasses (io_uring, openat2, jumbo frames…). Work by @ndaprela & @suidpit👏 🔗 shielder.com/blog/2026/04/i…

English

1.9K

nico retweetledi

Shielder@ShielderSec·31 Tem

🚨 New Open Source Audit Alert! 🚨 Shielder, with @OSTIFofficial & @AcademySwf, audited OpenEXR and MaterialX: 🔍 11 issues found (1 critical, 3 still to be published) ✔️ Most fixed, others planned 🗣️ to @ndaprela @smaury92 @suidpit @Th3Zer0 Full details in the blog post ⬇️🧵

English

2.1K

nico retweetledi

Shielder@ShielderSec·7 Nis

Last week @Apple released MacOS 13.4 which contains a fix for a vulnerability @suidpit exploited to escape the Sandbox. Update now and stay tuned for the technical details! Ref: support.apple.com/en-us/122373

English

2.2K

nico retweetledi

smaury 4.7@smaury92·18 Mar

One of my old @GoogleVRP reports just went public -- check it out if you want to see an example of CEF exploitation. bughunters.google.com/reports/vrp/qM…

English

4.7K

nico retweetledi

TumpiCon@TumpiConIT·6 Şub

Hey hackers! We’ve started sending out the first invites — check your inbox! 👀 Didn’t get one? Take the fast track and submit a talk!

English

2.3K

nico retweetledi

Shielder@ShielderSec·16 Oca

🚨 New Open Source Audit Alert! 🚨 Shielder, with @OSTIFofficial & @CloudNativeFdn, audited @karmada_io: 🔍 6 issues found (1 high, 1 medium, 2 low, 2 info) ✔️ Most fixed, others planned. 🗣️ to @suidpit and @Th3Zer0 Full details in the blog post! shielder.com/blog/2025/01/k…

English

2.5K

nico@ndaprela·12 Oca

👀

TumpiCon@TumpiConIT

The second edition of TumpiCon is here! 📅 June 27-28, 2025 📍 Somewhere near Turin, Italy 🔒 Invite-only No flashy stages. No fluff. Just raw, technical, and unfiltered hacking. More details? If you know, you know. Follow the trail: tumpicon.org

ART

nico retweetledi

TumpiCon@TumpiConIT·24 Şub

👋🏿 hackers, make sure to check your inbox - we started sending the invites for #TumpiCon2023! If you did not receive one and you like to join us: DMs are open (pro tip: proposing a talk is an awesome way to raise your chances of receiving an invite 😉).

English

1.6K

nico retweetledi

JBZ@JBZTeam·4 May

@ila_marco_ @fbsecurity @NotHdesk @zi0Black @not4nhacker JBZ is not associated with any former, present, or future team member which participates in a CTF / event and does not get disqualified. #faketaxi #6ofsouth #barbapapa

English

nico retweetledi

@[email protected]@qwertyoruiopz·4 Ağu

this was quite a fun bug!

Saar Amar@AmarSaar

Once I started looking for fixed bugs in JSC DFG JIT for this CHERI talk, it was clear that I would end up with something related to the DFG and FTL master @bkth_. Great find by @bkth_ , and of course, fantastic && elegant exploit by the one and only @qwertyoruiopz!

English

129

nico retweetledi

JBZ@JBZTeam·9 Tem

Congrats! Keep pwning hard! 🎉

Davide Maiorca@maiorcasecurity

L'Università degli Studi di Cagliari vince la Finale Nazionale del progetto @CyberChallengIT! Abbiamo fatto un piccolo "miracolo", frutto di tre anni di lavoro e sacrifici, partendo praticamente da zero. Niente è impossibile, se ci si crede davvero! @univca #security #ctf #proud

English

nico retweetledi

tmp.0ut@tmpout·21 Nis

We are pleased to announce tmp.0ut Vol. 1 tmpout.sh/1/

English

683

1.9K

nico retweetledi

cts🌸@gf_256·30 Mar

'90s hackers in 2021

English

575

nico retweetledi

Cutter@cutter_re·29 Mar

We are excited to release Cutter v2.0 — our first release with @rizinorg 🚀 We introduce major improvements to Cutter, including support for Projects, Reverse Debugging, better stability, and more. Learn more in our blog post: cutter.re/cutter-2.0

English

167

nico retweetledi

Shielder@ShielderSec·16 Şub

🎉 Our big 2020 research is finally public 🎉 Discover how @polict_ went from close-to-0 knowledge in fuzzing to crafting 13 0-days in @Telegram! shielder.it/blog/2021/02/h…

English

122

nico retweetledi

Zon8 Research@Zon8Research·31 Ara

To close out 2020, we bring you JavaScriptCore Internals Part 2, a guide on Llint and baseline JIT for exploit development. zon8.re/posts/jsc-inte… We wish all a Happy New Year. May 2021 bring you shells o' plenty. But above all the chance to reunite with friends ✌️

English

166

nico retweetledi

Corellium@CorelliumHQ·29 Ara

"Corellium, a security research firm sued by Apple, has won a major legal victory against the iPhone maker. A federal judge in Florida threw out Apple’s claims that Corellium violated copyright law with its software, which helps security researchers find bugs and security holes."

Reed Albergotti@ReedAlbergotti

This just in: @CorelliumHQ wins its copyright battle against Apple, a pretty surprising defeat in what was a very David v Goliath battle. washingtonpost.com/technology/202…

English

344

1.3K

nico retweetledi