Posts
My First Car Hacking Lab - CAN Bus.
In this post, we’ll explore how internal communications in modern cars actually work via CAN Bus, what ECUs are, and how they communicate...
Trying to Break My Samsung TV
In this post, we'll look at some issues that could put your TV at risk
Hacking IoT Microscope - Open WiFi and Unencrypted Video Stream
Discovery of multiple security vulnerabilities in an IoT microscope with built-in IP camera.
Hacking Nucom NJ-3R Router - IP-Based Authentication Without Validation
Discovery of multiple vulnerabilities in Nucom NJ-3R router.
My first IoT hacking lab at home
Building a practical IoT pentesting laboratory with ESP32, DHT11 sensors and MQTT to reproduce real audit scenarios, from firmware extrac...
Hacking 80% of Sushi Buffets - Critical Vulnerabilities in Management Systems
Discovery of critical vulnerabilities in the shared infrastructure of multiple sushi restaurants that expose sensitive customer data and ...
Stored XSS Vulnerability in MCP HTML Deployment Service: Technical Analysis
Detailed technical analysis of critical stored XSS vulnerability discovered using MCPwn in MCP deployment service. Includes step-by-step ...
MCPwn: Advanced Penetration Testing Tool for Model Context Protocol Servers
Discover MCPwn, a comprehensive security testing tool designed for auditing Model Context Protocol servers. Learn how to identify vulnera...
XSS Filter Bypass in Educational Web Application: SVG-Based Techniques
Analysis of a successful XSS filter bypass in an educational web application using SVG elements with event handlers, demonstrating limita...
Firebase Exposed: When Insecure Configurations Compromise Educational Platforms
Analysis of critical vulnerabilities in Firebase configurations that allow user data manipulation, personal information exposure, and una...