Technology

Day[0]

by dayzerosec

Claiming needs an RSS feed. Contact us.

Listen on Apple Podcasts

Recently ranked · United States

Last recorded placements from this show’s chart history. These are not current rankings.

Not on the United States charts we track today.

If you like Day[0], try…

Bounty Wishes Reddit Stories

Latest episodes

The Future

April 10, 2026 · 1 hr 20 min

After 283 episodes, this will be the final episode of the DAY[0] podcast. We started the podcast on a hopeful note in the days following Ghidra's release. Now, to end it off we've got another discussion about how we see the future of…
Exploiting VS Code with Control Characters

May 12, 2025 · 30 min

A quick episode this week, which includes attacking VS Code with ASCII control characters, as well as a referrer leak and SCIM hunting. Links and vulnerability summaries for this episode are available at: https://dayzer…
Mitigating Browser Hacking - Interview with John Carse (SquareX Field CISO)

April 22, 2025 · 1 hr 47 min

A special episode this week, featuring an interview with John Carse, Chief Information Security Officer (CISO) of SquareX. John speaks about his background in the security industry, grants insight into attacks on browsers, and talks about…
Pulling Gemini Secrets and Windows HVPT

April 16, 2025 · 1 hr 33 min

A long episode this week, featuring an attack that can leak secrets from Gemini's Python sandbox, banks abusing private iOS APIs, and Windows new Hypervisor-enforced Paging Translation (HVPT). Links and vulnerability summaries for this…
Session-ception and User Namespaces Strike Again

April 1, 2025 · 50 min

API hacking and bypassing Ubuntu's user namespace restrictions feature in this week's episode, as well as a bug in CimFS for Windows and revisiting the infamous NSO group WebP bug. Links and vulnerability summaries for this episode are…

Show 7 more episodesShow fewer episodes

Extracting YouTube Creator Emails and Spilling Azure Secrets

March 24, 2025 · 44 min

This episode features some game exploitation in Neverwinter Nights, weaknesses in mobile implementation for PassKeys, and a bug that allows disclosure of the email addresses of YouTube creators. We also cover some research on weaknesses in…
ESP32 Backdoor Drama and SAML Auth Bypasses

March 17, 2025 · 1 hr 14 min

Discussion this week starts with the ESP32 "backdoor" drama that circled the media, with some XML-based vulnerabilities in the mix. Finally, we cap off with a post on reviving modprobe_path for Linux exploitation, and some discussion…
Exploiting Xbox 360 Hypervisor and Microcode Hacking

March 12, 2025 · 1 hr 19 min

A very technical episode this week, featuring some posts on hacking the xbox 360 hypervisor as well as AMD microcode hacking. Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/p…
Path Confusion and Mixing Public/Private Keys

March 3, 2025 · 60 min

This week's episode features a variety of vulnerabilities, including a warning on mixing up public and private keys in OpenID Connect deployments, as well as path confusion with an nginx+apache setup. Links and vulnerability summaries for…
ZDI's Triaging Troubles and LibreOffice Exploits

February 25, 2025 · 57 min

We discuss an 0day that was dropped on Parallels after 7 months of no fix from the vendor, as well as ZDI's troubles with responses to researchers and reproducing bugs. Also included are a bunch of filesystem issues, and an insanely…
Recycling Exploits in MacOS and Pirating Audiobooks

February 18, 2025 · 1 hr 17 min

We cover a comical saga of vulnerabilities and variants from incomplete fixes in macOS, as well as a bypass of Chrome's miraclePtr mitigation against Use-After-Frees (UAFs). We also discuss an attack that abuses COM hijacking to elevate to…
Top 10 Web Hacking Techniques and Windows Shadow Stacks

February 12, 2025 · 1 hr 13 min

In this episode, we discuss the US government discloses how many 0ds were reported to vendors in a first-ever report. We also cover PortSwigger's top 10 web hacking techniques of 2024, as well as a deep dive on how kernel mode shadow…