nns.ee
- 2026-08-26: Chaining multiple vulnerabilities in Project Zomboid to execute code on a multiplayer client
- 2026-07-03: Bypassing the Sound Blaster's new firmware signature check
- 2026-06-03: Pwnd Blaster: Hacking your PC using your speaker without ever touching it
- 2026-02-20: Reverse engineering the Creative Katana V2X soundbar to be able to control it from Linux
- 2026-01-29: Solving Fossil SCM's CAPTCHA in 171 characters
- 2026-01-06: Reverse engineering my cloud-connected e-scooter and finding the master key to unlock all scooters
- 2025-07-24: Bypassing dnsmasq dhcp-script limitations for command execution in config injection attacks
- 2025-04-01: Retrospective on hosting my blog inside an LTE modem, 4 years later
- 2025-03-28: When parameterization fails: SQL injection in Nim's db_postgres module using parameterized queries
- 2022-08-05: Symlinks as mount portals: Abusing container mount points on MikroTik's RouterOS to gain code execution
- 2022-06-21: Code execution as root via AT commands on the Quectel RG500Q-EA 5G modem
- 2022-01-31: Don't trust comments
- 2021-04-03: Code execution as root via AT commands on the Quectel EG25-G modem
- 2021-04-01: This blog is now hosted on a GPS/LTE modem
- 2021-01-18: Viewing and resetting the BIOS passwords on the RedmiBook 16
- 2020-10-19: Patching ACPI tables to enable deep sleep on the RedmiBook 16
- 2019-05-28: iopshell: A shell-like application for communicating with IOPSYS devices
- 2019-04-14: chroot shenanigans 2: Running a full desktop environment on an Amazon Kindle
- 2019-03-21: chroot shenanigans: Running Arch Linux on OpenWRT (LEDE) routers
- 2018-12-26: Unsafe firewall includes allowing for remote code execution on Inteno's IOPSYS devices
- 2018-08-01: Creating a key generator to reset a Hikvision IP camera's admin password
- 2018-07-21: From writing to /tmp to a root shell on Inteno IOPSYS
- 2018-04-15: pwn910nd - abusing OpenWRT's printer server to become root
- 2017-12-23: Remote Code Execution vulnerability in Inteno's Iopsys
- 2017-07-21: CVE-2017-11361 post-remedy: Is it fixed?
- 2017-07-17: Inteno misconfigured ACLs leading to information disclosure and logging in as root
- 2017-07-13: Installing custom OpenWRT on an Inteno (DG301) router
- 2017-06-21: ksoft's Easy Auto Refresh extension is selling your data
- 2017-06-16: Restoring stock BIOS on a Braswell Chromebook with a broken rom
End of feed.