@zero_wf

Application security specialist

Joined May 2012
  • Tweets161
  • Following174
  • Followers114
Danila Parnishchev retweeted
Flipper Devices
@flipper_netMay 21
We're finally ready to talk about Flipper One — a project we've been grinding on for years and have rebuilt from scratch several times. Read blog post >> blog.flipper.net/flipper-one…

Flipper One — we need your help

With Flipper One, we're reimagining what a Linux cyberdeck can be — it's a huge project. We're opening up the development process and asking the community for help.

blog.flipper.net
112
538
107
3,978
578,328
Danila Parnishchev retweeted
konata@konatabrk10 Apr 2025
Remote Exploitation of Nissan Leaf: Controlling Critical Body Elements from the Internet At Black Hat Asia, @_moradek_ and I presented proof that attackers can remotely pwn your vehicle using only 3 stack bof 😱 Including control of a steering wheel! 🚘 i.blackhat.com/Asia-25/Asia-…
3
10
1
51
5,419
Danila Parnishchev retweeted
Binni Shah
@binitamshah15 Dec 2024
Proof-of-concept: Getting root access on Volkswagen MIB3 via Bluetooth youtube.com/watch?v=cqBSh8xg… Over the Air Compromise of Modern Volkswagen Group Vehicles : i.blackhat.com/EU-24/Present… (Slides*)
59
3
192
15,915
Danila Parnishchev retweeted
Denis Laskov 🇮🇱
@it4sec13 Dec 2024
With a one-time RCE via Bluetooth, attackers infect the car and are able to record in-car audio, take screenshots, and download contacts from a Skoda Superb, all while it is being driven, over the Internet! 🚘😱 🔥 PDF: i.blackhat.com/EU-24/Present… Video PoC: youtube.com/watch?v=T4v8H0qJ…
2
62
1
196
15,022
Danila Parnishchev retweeted
Alex_S@A1ex_S8 Nov 2024
The huge update for NFC mitm scripts is on the public repo now! Works with our CardShark badge from PaymentVillage. Check it out! github.com/CardToolz/libnfc_… Please feel free to report any issues @paymentvillage #emv #nfc #replay #hack

GitHub - CardToolz/libnfc_mitm_cffi: NFC MiTM made with two PN532 readers and a Raspberry Pi.

NFC MiTM made with two PN532 readers and a Raspberry Pi. - CardToolz/libnfc_mitm_cffi

github.com
1
4
10
560
Danila Parnishchev retweeted
PCA Cyber Security@PCACyberSec4 Oct 2024
Replying to @BlackHatEvents
@BlackHatEvents announced our talk "Over the Air: Compromise of Modern Volkswagen Group Vehicles". We will uncover now fixed vulnerabilities in MIB3 infotainment, affecting millions of vehicles. Hope to see you there! Further details of the talk: blackhat.com/eu-24/briefings…
Black Hat
@BlackHatEvents3 Oct 2024
#BHEU Briefings "Over the Air: Compromise of Modern Volkswagen Group Vehicles" will disclose a chain of critical vulnerabilities in the Infotainment System used in many Volkswagen Group vehicles including Skoda Superb III 2022. Register now>> bit.ly/3Y5MKOy
4
8
319
Danila Parnishchev retweeted
PCA Cyber Security@PCACyberSec15 Jul 2024
Last week PCAutomotive received a cool Tesla test bench for security research. Huge thanks to @Tesla for such a present, and for funny Easter eggs!
2
2
18
1,073
Danila Parnishchev retweeted
TheZDIBugs@TheZDIBugs24 Jun 2024
[ZDI-24-844|CVE-2024-23923] (Pwn2Own) Alpine Halo9 prh_l2_sar_data_ind Use-After-Free Remote Code Execution Vulnerability (CVSS 8.8; Credit: PCAutomotive) zerodayinitiative.com/adviso…
3
1
5
1,587
Danila Parnishchev retweeted
TheZDIBugs@TheZDIBugs24 Jun 2024
[ZDI-24-873|CVE-2024-23973] (Pwn2Own) Silicon Labs Gecko OS HTTP GET Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8; Credit: PCAutomotive) zerodayinitiative.com/adviso…
2
3
608
Danila Parnishchev retweeted
TheZDIBugs@TheZDIBugs24 Jun 2024
[ZDI-24-872|CVE-2024-24737] (Pwn2Own) Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability (CVSS 6.5; Credit: PCAutomotive) zerodayinitiative.com/adviso…
5
4
604
Danila Parnishchev retweeted
paymentvillage@paymentvillage8 Mar 2024
The Payment Village has opened its call for volunteers at DEF CON 32. If you would like to be part of the team and will be in Las Vegas this summer, please fill out the form. We are growing and would like to add some incredible people to the team paymentvillage.org/call-for-…
1
5
1
13
3,555
Isn't that case for automotive infotainment test bench cool? Designed by @A1ex_S and @moe_hw
PCA Cyber Security@PCACyberSec7 Jun 2024
Ready for @AutoISAC EU Summit! @VWGroup MIB3 test bench for security tests is 3D-designed, printed, and ready to go. Meet us live for more details about automotive ECU pentesting. Stay tuned for cool security research later this year!
1
4
178
After wiring several such setups I'm starting to think my job is car electrician) @ivachyou hacked component protection, @moe_hw and @A1ex_S designed a cool case for it. More photos later, live demo at Auto-ISAC summit this year
PCA Cyber Security@PCACyberSec29 May 2024
Excited to present our test bench at the Auto-ISAC Summit! We’re showcasing a Volkswagen MIB3 unit with speakers, a mic, and USB. See the impact of vulnerabilities we identified in 2022 at our booth 7. Full disclosure later this year. Stay tuned! #AutoISAC #CyberSecurity
1
5
1,576
Danila Parnishchev retweeted
PCA Cyber Security@PCACyberSec29 May 2024
Excited to present our test bench at the Auto-ISAC Summit! We’re showcasing a Volkswagen MIB3 unit with speakers, a mic, and USB. See the impact of vulnerabilities we identified in 2022 at our booth 7. Full disclosure later this year. Stay tuned! #AutoISAC #CyberSecurity
1
1
5
1,906
Danila Parnishchev retweeted
PCA Cyber Security@PCACyberSec9 Feb 2024
🏆 Big win in Tokyo! Our team secured a $40K prize at #Pwn2Own Automotive with a slick UAF exploit on the Alpine Halo9 iLX-F509. Huge thanks to our team for their hard work & to @thezdi for an epic contest. #P2OAuto
2
1
5
1,331
We did it! @konatabrk very cool job!
TrendAI Zero Day Initiative
@thezdi24 Jan 2024
The PCAutomotive Team (@PC_Automotive) successfully targeted the Alpine Halo9 iLX-F509. Results will be confirmed in the disclosure room. #Pwn2Own
4
166
The PCAutomotive Team (@PC_Automotive) successfully targeted the Alpine Halo9 iLX-F509. Results will be confirmed in the disclosure room. #Pwn2Own
5
1
15
5,659
Danila Parnishchev retweeted
PCA Cyber Security@PCACyberSec23 Jan 2024
We are the first ones in the Alpine Halo 9 category, and the 4th ones in Enel X JuiceBox category! @k0nata_ @_moradek_ @moe_hw good luck out there! The full schedule of #Pwn2Own Automotive 2024 is at zerodayinitiative.com/blog/2…

Zero Day Initiative — Pwn2Own Automotive 2024 - The Full Schedule

Welcome to our very first Pwn2Own Automotive – coming to you live from Tokyo and the Automotive World conference. The number of entries has surpassed our expectations, so we expect to award more than...

zerodayinitiative.com
1
3
7
470
Danila Parnishchev retweeted
PCA Cyber Security@PCACyberSec19 Jan 2024
Next week our team will compete in #Pwn2Own Automotive in Tokyo! Organizers @thezdi and @VicOneAuto revealed targets: #Tesla, IVI, EV Chargers & OS. Last year Synacktiv's team won $75K with an impressive infotainment system exploit. #P2OAuto youtu.be/ZUs98Z-pIpY

From Pwn2Own Vancouver 2022 - Team Synacktiv vs Tesla Model 3

During Pwn2Own Vancouver 2022, the Synacktiv team of David Berard a...

youtube.com
1
2
6
471
Danila Parnishchev retweeted
PCA Cyber Security@PCACyberSec8 Dec 2023
🚗 Missed our presentation at escar Europe 2023? No worries! Watch Danila Parnishchev's talk on "Top 10 Security Issues in Modern Vehicles." Thanks to @isitsag for an amazing event in Hamburg. Catch up here ➡️ youtu.be/TslcJScwEsk

Danila Parnishchev | 21st escar Europe

Enjoy the videos and music you love, upload original content, and share it all with friends, family, and the world on YouTube.

youtube.com
3
4
214
Load more