Systems & architecture
I’m CTO at Rooters, leading technical strategy, software architecture, and infrastructure.
Pasquale Fiorillo / sid
Security Consultant & Researcher.
Mind about your safety.
Mind about your safety.
About me
Offensive security
At ISGroup, I perform penetration tests and vulnerability assessments on networks and web applications.
Vulnerability research
I research vulnerabilities in widely used software and web applications, often in collaboration with USH.
Notes & articles
From technical papers to personal notes, I share what I learn. You can find more on my blog.
A bit of history
My passion for computers began with a Commodore 64, which I still jealously keep, followed by an Amiga 500 and my first PCs. Around 1995, with the first dial-up connections, I discovered the Internet and started hanging out on IRC in channels like #phreak.it, #hack.it, and #zapolandia.
Back then, I devoured every e-zine I could find, from technical classics like Phrack, s0ftpj’s BFi, and UIC (Università Italiana Cracking) to lamer reads like Netrunners. That eventually led me to co-found Italian Hard Phreaking with IRC friends, writing about hacking, reverse engineering, and exploiting phone networks for free calls and more, which was also published on Spaghetti Phreakers, Italy’s last and youngest old-school phreaking crew.
Over time, that same curiosity led me to security research in a long-standing collaboration with the people at USH, and today AI opens up a whole new world to explore.
Away from the keyboard, I have a deep love for the sea: I hold an Open Water Diver certification and recently earned my sailing license for cruising yachts.
Publications
Security research and advisories.
GoSign Desktop
Multiple Vulnerabilities in GoSign Desktop Lead to Remote Code Execution
When configured to use a proxy, GoSign Desktop 2.4.0 and earlier disables TLS certificate validation and relies on unsigned update manifests, allowing remote code execution, credential theft, and privilege escalation.
TLS & DDNS
Usage of TLS in DDNS Services Leads to Information Disclosure in Multiple Vendors
Using TLS certificates with vendor-provided Dynamic DNS services exposes device hostnames in public Certificate Transparency logs, making customer appliances easier for attackers to discover.
Sources & references (2)
QNAP QTS
QNAP QTS Domain Privilege Escalation Vulnerability
A vulnerability in QNAP QTS allows a local user, such as the httpdusr account used by web applications, to escalate privileges to Domain Administrator when the NAS is joined to a domain.
Veeam Backup & Replication
Veeam Backup & Replication Local Privilege Escalation Vulnerability
A vulnerability in Veeam Backup & Replication allows a low-privileged local Windows user, such as an anonymous IIS virtual host account, to escalate privileges to Domain Administrator.
Keep in touch
Reach out by email or find me on these platforms.
For professional services, please contact Rooters.
info@{myname}{mysurname}.it
{myname} is pasquale
{mysurname} is fiorillo
Encryption
My public PGP key: 0x124FED2DF8DA417E