Path Confusion and Mixing Public/Private Keys

Day[0] by dayzerosec

Mar 3, 202500:59:34Technology

This week's episode features a variety of vulnerabilities, including a warning on mixing up public and private keys in OpenID Connect deployments, as well as path confusion with an nginx+apache setup. Links and vulnerabi...

Related Episodes

Continue listening to more episodes from Day[0].

The Future

Apr 10, 2026 - 01:20:07

After 283 episodes, this will be the final episode of the DAY[0] podcast. We started the podcast on a hop...

Exploiting VS Code with Control Characters

May 12, 2025 - 00:30:08

A quick episode this week, which includes attacking VS Code with ASCII control characters, as well as a r...

Mitigating Browser Hacking - Interview with John Carse (SquareX Field CISO)

Apr 22, 2025 - 01:46:57

A special episode this week, featuring an interview with John Carse, Chief Information Security Officer (...

Pulling Gemini Secrets and Windows HVPT

Apr 16, 2025 - 01:33:22

A long episode this week, featuring an attack that can leak secrets from Gemini's Python sandbox, banks a...

Session-ception and User Namespaces Strike Again

Apr 1, 2025 - 00:49:36

API hacking and bypassing Ubuntu's user namespace restrictions feature in this week's episode, as well as...

Extracting YouTube Creator Emails and Spilling Azure Secrets

Mar 24, 2025 - 00:44:04

This episode features some game exploitation in Neverwinter Nights, weaknesses in mobile implementation f...

ESP32 Backdoor Drama and SAML Auth Bypasses

Mar 17, 2025 - 01:14:08

Discussion this week starts with the ESP32 "backdoor" drama that circled the media, with some XML-based v...

Exploiting Xbox 360 Hypervisor and Microcode Hacking

Mar 12, 2025 - 01:19:05

A very technical episode this week, featuring some posts on hacking the xbox 360 hypervisor as well as AM...