Pentester and Security Researcher
Italy
Joined April 2016
- Tweets421
- Following29
- Followers192
- Likes13
nico retweeted
About to hop on the flight to Bali.
Let’s bring some anarchy to the loopback.
#TheSAS2026
nico retweeted
Can a hostile container sneak past your eBPF tracing? Sometimes, yes.
With @OSTIFofficial & @CloudNativeFdn we audited Inspektor Gadget - 3 vulns (fixed), 6 hardenings, 6 bypasses (io_uring, openat2, jumbo frames…).
Work by @ndaprela & @suidpit👏
🔗 shielder.com/blog/2026/04/in…
nico retweeted
🚨 New Open Source Audit Alert! 🚨
Shielder, with @OSTIFofficial & @AcademySwf, audited OpenEXR and MaterialX:
🔍 11 issues found (1 critical, 3 still to be published)
✔️ Most fixed, others planned
🗣️ to @ndaprela @smaury92 @suidpit @Th3Zer0
Full details in the blog post ⬇️🧵
nico retweeted
Last week @Apple released MacOS 13.4 which contains a fix for a vulnerability @suidpit exploited to escape the Sandbox.
Update now and stay tuned for the technical details!
Ref: support.apple.com/en-us/1223…
nico retweeted
One of my old @GoogleVRP reports just went public -- check it out if you want to see an example of CEF exploitation.
bughunters.google.com/report…
👀
The second edition of TumpiCon is here!
📅 June 27-28, 2025
📍 Somewhere near Turin, Italy
🔒 Invite-only
No flashy stages. No fluff. Just raw, technical, and unfiltered hacking.
More details? If you know, you know.
Follow the trail: tumpicon.org
nico retweeted
👋🏿 hackers, make sure to check your inbox - we started sending the invites for #TumpiCon2023!
If you did not receive one and you like to join us: DMs are open (pro tip: proposing a talk is an awesome way to raise your chances of receiving an invite 😉).
nico retweeted
JBZ is not associated with any former, present, or future team member which participates in a CTF / event and does not get disqualified.
#faketaxi #6ofsouth #barbapapa
nico retweeted
this was quite a fun bug!
Once I started looking for fixed bugs in JSC DFG JIT for this CHERI talk, it was clear that I would end up with something related to the DFG and FTL master @bkth_. Great find by @bkth_ , and of course, fantastic && elegant exploit by the one and only @qwertyoruiopz!
nico retweeted
Congrats! Keep pwning hard! 🎉
L'Università degli Studi di Cagliari vince la Finale Nazionale del progetto @CyberChallengIT! Abbiamo fatto un piccolo "miracolo", frutto di tre anni di lavoro e sacrifici, partendo praticamente da zero. Niente è impossibile, se ci si crede davvero! @univca #security #ctf #proud
nico retweeted
We are excited to release Cutter v2.0 — our first release with @rizinorg 🚀
We introduce major improvements to Cutter, including support for Projects, Reverse Debugging, better stability, and more.
Learn more in our blog post: cutter.re/cutter-2.0
nico retweeted
🎉 Our big 2020 research is finally public 🎉
Discover how @polict_ went from close-to-0 knowledge in fuzzing to crafting 13 0-days in @Telegram!
shielder.it/blog/2021/02/hun…
nico retweeted
To close out 2020, we bring you JavaScriptCore Internals Part 2, a guide on Llint and baseline JIT for exploit development.
zon8.re/posts/jsc-internals-…
We wish all a Happy New Year. May 2021 bring you shells o' plenty. But above all the chance to reunite with friends ✌️
nico retweeted
"Corellium, a security research firm sued by Apple, has won a major legal victory against the iPhone maker. A federal judge in Florida threw out Apple’s claims that Corellium violated copyright law with its software, which helps security researchers find bugs and security holes."
This just in: @CorelliumHQ wins its copyright battle against Apple, a pretty surprising defeat in what was a very David v Goliath battle. washingtonpost.com/technolog…
