research & things

2025

18 Feb Getting SYSTEM by Changing an IP Address

2024

29 Nov Swiss Tax Adventures 2: The N-Day and the Rabbit Hole
20 Oct Swiss Tax Adventures 1: The Forbidden Jar of XXE
09 Oct Running mitmproxy on a Raspberry Pi
30 Jun Persistence with VSCode Plugin backdoors
29 Feb Instrumentalizing Electron: Proxy Injection

2023

25 Oct Exfiltrating Data Like It's 1995

2022

27 Sep D-Link DNR-322L: Authenticated RCE
23 Aug UART, uBoot, u root
23 Jan Abusing User Habits with Evil Bookmarks

2021

04 Sep A Poor Attempt at Hacking My Toothbrush
01 Aug Post-Exploit Phishing with PowerShell