AOL Desktop Gold Security Research Public Release

As mentioned in my last post, I have some very backlogged projects I’ve decided to just release to get them out of my backlog. This one is related to AOL Desktop Gold, the modern successor to the AOL desktop software a lot of us remember from the 90s. Yes it does still exist (and hence … Continue reading AOL Desktop Gold Security Research Public Release →

Button Presses to Wireless RCE: Shell on Flock Safety’s License Plate Cameras Over Wi-Fi

A combination of reused default passwords, hidden triggers, and completely unauthenticated APIs results in reliable wireless RCE, data disclosure, and device control in the field on Flock Safety's License Plate Readers.