mkiesel.ch/~

2025

12 May UUIDs Should Not Replace Authorization
18 Feb Getting SYSTEM by Changing an IP Address

2024

29 Nov Swiss Tax Adventures 2: The N-Day and the Rabbit Hole
15 Nov [TALK] Atlassian Under the Hood
20 Oct Swiss Tax Adventures 1: The Forbidden Jar of XXE
09 Oct Running mitmproxy on a Raspberry Pi
30 Jun Persistence with VSCode Plugin backdoors
29 Feb Instrumentalizing Electron: Proxy Injection

2023

31 Dec Hackvent 2023 Writeup
25 Oct Exfiltrating Data Like It's 1995
10 Oct [TALK] Grand Theft Data - 101 Exfiltration Techniques
17 May Hacky Easter 2023: Bash Crash Writeup

2022

27 Sep D-Link DNR-322L: Authenticated RCE
23 Aug UART, uBoot, u root
11 May Pivoting with Chisel
26 Apr Active Directory Cheatsheet
25 Apr My OSCP Journey
23 Jan Abusing User Habits with Evil Bookmarks

2021

04 Sep A Poor Attempt at Hacking My Toothbrush
01 Aug Post-Exploit Phishing with PowerShell