recent posts

• Aug 22, 2024CVE-2024-41992 : RCE on Arcadyan 5G routers via wfa_dutWell, since I don’t have fiber in my apartment, and after a quick comparison of alternatives, I decided to get a Bouygues 5G box subscription.
• Jun 20, 2024Exploring IoT : JBL Wifi SpeakersTL;DR : 3 Unpatched remotely exploitable RCE on JBL wifi speakers.
• Sep 23, 2023Useless exploits : Practical attack against time-based reset tokens generation in CroogoRecently, browsing the web, I stumbled upon an active website that used Croogohttps://github.com/croogo/croogo for content management, after digging…
• Aug 12, 2023SSRF till i dieRecently, for my internship, I was doing a security assessment for a transportation company, I discovered a chain of bugs that I though was…

all posts →