I’ve spent close to a decade breaking into things through a network cable. Infrastructures, Active Directory, web apps, the occasional vulnerabilities I discovered just to get a shell nobody asked ...

Exploiting SDMC NE6037 Router Recovery Backdoor to obtain root access

Obtaining unauthenticated remote root access on RUCKUS IoT Controller via the commander.py network-exposed service

Obtaining unauthenticated remote root access on RUCKUS IoT Controller via hardcoded SSH credentials and Docker socket abuse

RUCKUS Network Director Hardcoded SSH keys and PostgreSQL Credentials

FreePBX command injection, XSS and local privilege escalation chain

Windows Printers abuse for Command and Control

No story can start without a famous Arnold Schwarzenegger quote “None of us can make it alone”. Especially when you are in elementary school and you don’t have money to buy a computer. Fortunately,...