nns.ee blog.nns.ee

Reverse engineering the Creative Katana V2X soundbar

blog.nns.ee·12w·Hacker News

Solving Fossil's ASCII art CAPTCHA in 171 characters

blog.nns.ee·15w·Lobsters

Reverse engineering my cloud-connected e-scooter and finding the master key to unlock all scooters

blog.nns.ee·18w·Lobsters

Bypassing dnsmasq dhcp-script limitations for command execution in config injection attacks

blog.nns.ee·42w

Retrospective on hosting my blog inside an LTE modem, 4 years later

blog.nns.ee·58w·Hacker News

When parameterization fails: SQL injection in Nim using parameterized queries

blog.nns.ee·58w·Hacker News

Symlinks as mount portals: Abusing container mount points on MikroTik's RouterOS to gain code execution

blog.nns.ee·197w

Code execution as root via AT commands on the Quectel RG500Q-EA 5G modem

blog.nns.ee·203w

Don't trust comments

blog.nns.ee·223w

Code execution as root via AT commands on the Quectel EG25-G modem

blog.nns.ee·267w

This blog is now hosted on a GPS/LTE modem

blog.nns.ee·267w·Hacker News

Viewing and resetting the BIOS passwords on the RedmiBook 16

blog.nns.ee·277w

Patching ACPI tables to enable deep sleep on the RedmiBook 16

blog.nns.ee·290w

iopshell: A shell-like application for communicating with IOPSYS devices

blog.nns.ee·363w

chroot shenanigans 2: Running a full desktop environment on an Amazon Kindle

blog.nns.ee·370w

chroot shenanigans: Running Arch Linux on OpenWRT (LEDE) routers

blog.nns.ee·373w

Unsafe firewall includes allowing for remote code execution on Inteno's IOPSYS devices

blog.nns.ee·385w

Creating a key generator to reset a Hikvision IP camera's admin password

blog.nns.ee·406w

From writing to /tmp to a root shell on Inteno IOPSYS

blog.nns.ee·408w

pwn910nd - abusing OpenWRT's printer server to become root

blog.nns.ee·421w

Log in to enable infinite scrolling