Share 
## https://sploitus.com/exploit?id=D8FACA64-1110-588B-842D-21E7EB2DC638
# Zero-Click, Old Tricks

Anatomy of the 2025 WhatsApp–ImageIO zero-click exploit chain
(CVE-2025-55177 + CVE-2025-43300). Research paper plus an
interactive web companion with CVE walkthroughs, patch diffs,
and hands-on heap/stack labs.

**Live site:** 
**Paper (PDF):** [`zero-click-old-tricks.pdf`](zero-click-old-tricks.pdf)
**Slides:** [`prezentareMCS_final.pptx`](prezentareMCS_final.pptx)

## Team

- **Ștefan-Daniel Wagner** β€” co-author
- **Dan-Gabriel Oltean** β€” co-author
- **Victor-Nicolae Matveev** β€” co-author
- **Emil Simion** β€” coordinator

Facultatea de ȘtiinΘ›e Aplicate, UNSTPB Β·
Master's research project, *Metodologia CercetΔƒrii ȘtiinΘ›ifice*, 2025–2026.

## Screenshots

![Home](docs/screenshots/home.png)
![Paper reader](docs/screenshots/paper-reader.png)
![Heap lab](docs/screenshots/heap-lab.png)
![CVEs](docs/screenshots/cves.png)

## Project layout

```
.
β”œβ”€β”€ zero-click-old-tricks.pdf   final paper (CC BY 4.0)
β”œβ”€β”€ prezentareMCS_final.pptx    slide deck (CC BY 4.0)
β”œβ”€β”€ web/                        Flask companion site (MIT)
β”‚   β”œβ”€β”€ app.py
β”‚   β”œβ”€β”€ requirements.txt
β”‚   β”œβ”€β”€ templates/
β”‚   └── static/
β”‚       β”œβ”€β”€ css/
β”‚       β”œβ”€β”€ js/
β”‚       β”œβ”€β”€ sections/           pre-rendered paper sections
β”‚       β”œβ”€β”€ figures/            TikZ SVGs
β”‚       └── downloads/          PDF + slides served by the site
β”œβ”€β”€ resources/                  bibliography (open-access local copies + links)
β”‚   └── README.md               full reference list with sources
└── docs/screenshots/           screenshots used in this README
```

## Run the web companion locally

Requires Python 3.12+.

```bash
cd web
python -m venv .venv
source .venv/bin/activate          # Windows: .venv\Scripts\activate
pip install -r requirements.txt
python app.py
```

Open . The site is fully static-backed β€”
paper sections, figures, and downloadables are pre-built.

## License

Dual-licensed:

- **Code** (everything under `web/`) β€” [MIT](LICENSE)
- **Paper content** (`zero-click-old-tricks.pdf`, `prezentareMCS_final.pptx`,
  derived rendered sections under `web/static/sections/` and figures under
  `web/static/figures/`) β€” [CC BY 4.0](LICENSE-PAPER)