How I Found Two Zero-Days in ASUS's Software as a Junior Pentester
by MrBruh | - 2:15pm
This is the story of how I found two zero-days in ASUS’s software: the first being a one-click RCE in their pre-installed DriverHub software, and the second being a method of leaking personal information, such as the phone number or address, of any user’s ASUS account.
About MrBruh
I am a 21-year-old, self-taught pentester and reverse engineer who is in my final year of working toward my bachelor’s degree. I sometimes find vulnerabilities in various systems and publish my cybersecurity write-ups on mrbruh.com.