About

Hello world here is dzonerzy, also known as Daniele Linguaglossa, I’m an offensive security researcher and developer.

I’m the author of this blog, and I’m using it to share my researches and my projects.

I’m also the author of the library that powers this blog, yes you heard right, this blog is powered by a shared object that I wrote in C!

You can find the source code of this blog in my git repository.

Projects

Here is a list of the projects that I made in my spare time, some of them are still in development, but I’m looking forward to finish them all.

libdzonerzy.so – libdzonerzy.so is a shared object that I wrote in C, it’s the library that I use to power this blog.

Collections of articles grouped under one hat.

PROMPT & PWN – Can AI find real, impactful 0days? An honest scoreboard of the effective capabilities - and the limits - of AI in vulnerability research, one exploited bug at a time (1 article)

Below you can find a list of my articles, I’m writing about offensive security and programming, and also about my projects.

HeartAttACK: An SCTP HEARTBEAT ACK Control-Queue Use-After-Free – How a parked SCTP heartbeat reply kept a raw pointer to a transport that ASCONF had already freed, and how I rode that 14-year-old lifetime bug to a deterministic, race-free local root on the Ubuntu 7.0.0-28-generic kernel - whole-slab cross-cache recycling, a verification-tag overlap oracle, and a rewritten f_mode in struct file. No ROP, no shellcode, KASLR untouched #kernel #linux #sctp #uaf #privesc
Neural Backdoors - When Your AI Has a Secret Agenda – A weekend journey into neural network security, poisoned datasets, and why detecting backdoors is harder than you think #ai #neural-networks #backdoors

From zero to botnet – GL.iNet going wild (RCE + Botnet) #iot #router #rce #botnet

Below you can find a list of my CVEs.

Here is a list of frequently asked questions, if you have any other question feel free to contact me at dzonerzy[at]gmail.com.

Q: Why this blog is so ugly?

A: Because I’m not a web designer, I’m a developer, and I’m not good at designing things, but I’m working on it, I promise.
Q: Why this blog is so fast?

A: Actually this is a static website, so it’s very fast.
Q: What do you do for living?

A: I’m currently working at RevEng.AI, where reversing meets artificial intelligence.
Q: Is RevEng.AI hiring?

A: Yes, we are always looking for new talents, if you are interested in working with me, feel free to send your resume at … try to find it, after all it’s still “inside” the shared object.