Spaceraccoon's Blog spaceraccoon.dev

Mic Drop – Discovering Vulnerabilities into Enterprise Audiovisual Hardware

spaceraccoon.dev·2w

Getting a Shell on the Tapo C260 Webcam (CVE-2026-0651, CVE-2026-0652, CVE-2026-0653)

spaceraccoon.dev·10w

Discovering Negative-Days with LLM Workflows

spaceraccoon.dev·14w

Ticket Tricking OpenSSL.org with Google Groups

spaceraccoon.dev·15w

Reverse Engineering the Tapo C260 and Tapo Discovery Protocol v2

spaceraccoon.dev·19w

Hacking the Nokia Beacon 1 Router: UART, Command Injection, and Password Generation with Qiling

spaceraccoon.dev·31w

Escaping the Matrix: Client-Side Deanonymization Attacks on Privacy Sandbox APIs

spaceraccoon.dev·39w

Getting a Shell on the LAU-G150-C Optical Network Terminal

spaceraccoon.dev·42w

Cybersecurity (Anti)Patterns: Frictionware

spaceraccoon.dev·48w·Hacker News

Cybersecurity (Anti)Patterns: Busywork Generators

spaceraccoon.dev·56w·Hacker News

Pwning Millions of Smart Weighing Machines with API and Hardware Hacking

spaceraccoon.dev·60w

Universal Code Execution by Chaining Messages in Browser Extensions

spaceraccoon.dev·97w

Cache Me If You Can: Local Privilege Escalation in Zscaler Client Connector (CVE-2023-41973)

spaceraccoon.dev·103w

Back to the (Clip)board with Microsoft Whiteboard and Excalidraw in Meta (CVE-2023-26140)

spaceraccoon.dev·119w

Hacking HP Display Monitors via Monitor Control Command Set (CVE-2023-5449)

spaceraccoon.dev·133w

Passing the New OSEE Exam After Forgetting Everything

spaceraccoon.dev·136w

Rule Writing for CodeQL and Semgrep

spaceraccoon.dev·162w

I Hope This Sticks: Analyzing ClipboardEvent Listeners for Stored XSS

spaceraccoon.dev·178w

Challendar: Creating a Challenge for The Infosecurity Challenge 2022

spaceraccoon.dev·191w

Exploiting Improper Validation of Amazon Simple Notification Service SigningCertUrl

spaceraccoon.dev·194w

Log in to enable infinite scrolling