Session-ception and User Namespaces Strike Again

Day[0] by dayzerosec

Apr 1, 202500:49:36Technology

API hacking and bypassing Ubuntu's user namespace restrictions feature in this week's episode, as well as a bug in CimFS for Windows and revisiting the infamous NSO group WebP bug. Links and vulnerability summaries for t...

Related Episodes

Continue listening to more episodes from Day[0].

The Future

Apr 10, 2026 - 01:20:07

After 283 episodes, this will be the final episode of the DAY[0] podcast. We started the podcast on a hop...

Exploiting VS Code with Control Characters

May 12, 2025 - 00:30:08

A quick episode this week, which includes attacking VS Code with ASCII control characters, as well as a r...

Mitigating Browser Hacking - Interview with John Carse (SquareX Field CISO)

Apr 22, 2025 - 01:46:57

A special episode this week, featuring an interview with John Carse, Chief Information Security Officer (...

Pulling Gemini Secrets and Windows HVPT

Apr 16, 2025 - 01:33:22

A long episode this week, featuring an attack that can leak secrets from Gemini's Python sandbox, banks a...

Extracting YouTube Creator Emails and Spilling Azure Secrets

Mar 24, 2025 - 00:44:04

This episode features some game exploitation in Neverwinter Nights, weaknesses in mobile implementation f...

ESP32 Backdoor Drama and SAML Auth Bypasses

Mar 17, 2025 - 01:14:08

Discussion this week starts with the ESP32 "backdoor" drama that circled the media, with some XML-based v...

Exploiting Xbox 360 Hypervisor and Microcode Hacking

Mar 12, 2025 - 01:19:05

A very technical episode this week, featuring some posts on hacking the xbox 360 hypervisor as well as AM...

Path Confusion and Mixing Public/Private Keys

Mar 3, 2025 - 00:59:34

This week's episode features a variety of vulnerabilities, including a warning on mixing up public and pr...