nns.ee

Project Zomboid recently released their long-awaited Build 42.

I recently demonstrated a few vulnerabilities in the Sound Blaster Katana V2/V2X/SE which allowed me to hijack the device over Bluetooth and turn it into an attacker-controlled keyboard peripheral, injecting keystrokes into the connected machine.

In my last post, I talked about reverse engineering my new Creative Sound Blaster Katana V2X's firmware.

I recently purchased a Creative Sound Blaster Katana V2X soundbar (what a mouthful) to replace my old, cheap Logitech computer speakers.

I recently stumbled upon what might be the most charmingly naive CAPTCHA implementation I've ever seen: Fossil SCM's text-based CAPTCHA.

A few years ago, I decided to buy an electric scooter for commuting in the city.

When researching networking devices, I frequently encounter a particular vulnerability: the ability to inject arbitrary options into dnsmasq's config files.

Exactly 4 years ago today, I wrote about hosting my blog on an LTE modem inside the PinePhone.

I discovered a potential SQL injection vulnerability in Nim's standard library module db_postgres.

RouterOS release 7.4beta4 introduced containers for MikroTik devices.

I recently researched a relatively new 5G-capable modem from Quectel: the RG500Q-EA.

And habitually review the third party code you're using - even when it's in the standard library.

As I mentioned towards the end of my previous blog post, where I detailed running my blog on the PinePhone's GSM/WWAN/GPS modem, I suspected that the daemon responsible for parsing AT commands on the modem's side is susceptible to OS command injection, as…

No, really.

I recently lost the BIOS password for my Xiaomi RedmiBook 16.

I recently purchased Xiaomi's RedmiBook 16.

You might've noticed I've been using a custom application for demonstrating vulnerabilities I've discovered on IOPSYS (Inteno) devices for the last few posts.

In my previous post, I described running Arch on an OpenWRT router.

Here's some notes on how to get Arch Linux running on OpenWRT devices.

In Inteno's IOPSYS devices, and very possibly other devices running firewall3 (which is included by default on most OpenWRT-based firmwares), it is possible for an authenticated attacker to abuse firewall includes to remotely execute any binary or script…

Unfortunately, generic IP cameras are notorious for their poor security practices.

In this blog post, I describe how multiple safe features and configurations can be used to gain full filesystem read-write access - and a root shell - on devices running Inteno's IOPSYS as an authenticated user.

I have discovered yet another vulnerability in Inteno's IOPSYS firmware - but I believe this to affect all OpenWRT or LEDE based routers that ship with the printer server p910nd.

I've discovered a remote code execution vulnerability in the latest version of Iopsys router software.

A couple of days ago I wrote about CVE-2017-11361, which described abusing misconfigured Access Control Lists to gain root access to Inteno routers.

Recently, while testing the security of Inteno routers, I found a misconfiguration in the Access Control Lists, which allows any authenticated user to see the contents of any file, write their own files and add an SSH key to the router, allowing for easy…

Soon after getting an Inteno DG301 router from my ISP Telia, I poked around the firmware trying to find out more about its internals.

I was doing some work with Burp Suite through Chrome (which I don't often do) and very soon I realised that all of my requests were being relayed to a domain edatasales.com.

Since Braswell is still widely unsupported in the world of Chromebooks (no public Tianocore/Windows rom released yet), one can expect to run into many issues when developing for these Chromebooks.