Posts

2026

Rooting Home Assistant through MeshCore: XSS attacks with a LoRa node name
June 3, 2026
RIPE NCC session fixation: poaching logins with an Atlas probe
May 28, 2026
1000 third parties could have stolen RIPE NCC session tokens - by design
May 6, 2026
Taking down a European network with a TLS certificate: my RIPE NCC RPKI exploit chain
April 29, 2026
Inside a 14-month responsible disclosure with the RIPE NCC
April 29, 2026
Root from the parking lot: OpenWrt XSS through SSID scanning (CVE-2026-32721)
March 19, 2026

2014

Hijacking iOS Keychain access groups through Apple’s provisioning portal
October 10, 2014