opzero_en's profile picture. The only Russian-based zero-day vulnerability purchase platform.

Operation Zero

@opzero_en

The only Russian-based zero-day vulnerability purchase platform.

Pinned

Telegram removed our channels from search but who cares? Just use the following links to subscribe there: t.me/opzero_en t.me/opzero_ru


Urgently in demand: — iOS 26 LPE from application to kernel — Up to $500,000 An exploit should work from a user application (Safari isn't required) and give as high privileges as possible, ideally kernel r/w. Zero-days without MIE bypass are still in the scope. Submit:…

opzero.ru

Operation Zero — Submit Your Zero-Day Exploit

We will be glad to review submissions of your zero-day exploits. Please be aware that we are buying only unpublished fully functional exploits that do not require additional work, do have good...


101 Chrome Exploitation — Part 1: Architecture We have published a new article on Chrome exploitation where the author describes the browser's architecture and its core components (Blink rendering engine, V8 JavaScript engine, network stack) and offers an exercise of adding a…

opzero.ru

101 Chrome Exploitation — Part 1: Architecture - Operation Zero EN

Modern web browsers have evolved from simple document viewers into sophisticated platforms capable of running complex web applications. At the heart of this transformation lies a carefully orchestr...


We are looking for: — nginx RCE — Up to $400,000 The exploit must work on stable and mainline branches without authentication and with default modules only, support both reverse proxy and CDN. Providing root instead of nginx privileges would be a plus.


101 Chrome Exploitation — Part 0: Preface We are starting a new series on modern browsers' architecture and their exploitation using Chrome as an example. Readers will learn how browser subsystems are implemented, how their security is ensured and how it is violated with…

opzero.ru

101 Chrome Exploitation — Part 0: Preface - Operation Zero EN

This will be an introductory course to exploiting browsers. Not just covering a few JIT bugs and common renderer process exploits, we'll take an in-depth look at the entire browser structure,...


Operation Zero reposted

Apparently it's illegal to talk about Russian exploit brokers in Europe. This censorship seems counterproductive to online safety.

sephr's tweet image. Apparently it's illegal to talk about Russian exploit brokers in Europe. This censorship seems counterproductive to online safety.
sephr's tweet image. Apparently it's illegal to talk about Russian exploit brokers in Europe. This censorship seems counterproductive to online safety.
This post is unavailable.

Vacancy: External Browser Security Researcher OPERATION ZERO is currently looking for a professional exploit developer to join the Browser research team as an external employee. Responsibilities: • Carry out tasks assigned to the team, including the research of one of modern…


Vacancy: External Android Security Researcher OPERATION ZERO is currently looking for a professional exploit developer to join the Android research team as an external employee. Responsibilities: • Carry out tasks assigned to the team, including the research of the Android…


In search of: — Mikrotik router RCE — Up to $150,000 Zero-day exploits should be applicable to Ethernet or Wireless routers. More broad range of devices such as switches would be a plus which may increase the total payout. Submit details via the form: opzero.ru/en/submit/

opzero.ru

Operation Zero — Submit Your Zero-Day Exploit

We will be glad to review submissions of your zero-day exploits. Please be aware that we are buying only unpublished fully functional exploits that do not require additional work, do have good...


Also, we look for: — macOS kernel LPE — Up to $300,000 — macOS non-kernel LPE — Up to $100,000 Zero-day exploits should work on macOS 13/14 running on Apple silicon M1 and M2 chips. Submit details via the form: opzero.ru/en/submit/

opzero.ru

Operation Zero — Submit Your Zero-Day Exploit

We will be glad to review submissions of your zero-day exploits. Please be aware that we are buying only unpublished fully functional exploits that do not require additional work, do have good...


We would also like to see your submissions on these targets: — SonicWall NGFW RCE — Up to $200,000 — FortiGate NGFW RCE — Up to $200,000 — MS Word RCE — Up to $150,000 The prices depend on limitations of exploits. Submit details via the form: opzero.ru/en/submit

opzero.ru

Operation Zero — Submit Your Zero-Day Exploit

We will be glad to review submissions of your zero-day exploits. Please be aware that we are buying only unpublished fully functional exploits that do not require additional work, do have good...


This account does not follow anyone
Loading...

Something went wrong.


Something went wrong.