Scada-LTS - Privilege escalation to RCE (CVE-2023-33472)
Vulnerability information CVE-ID: CVE-2023-33472 Vulnerability Type: Incorrect Access Control Affected Product Code Base: Scada-LTS v2.7.5.2 build 4551883606 (or previous versions) Attack...
hev0x
Dumping and cracking Siemens S7-200 PLC secrets
Introduction Just like any computer system, PLCs (Programmable Logic Controller) and other operational technology components have protection mechanisms. These security features usually involve re...
Debugging 8-bit AVR® microcontrollers with avr-gdb and Atmel-ICE.
Not only during the firmware development process, in embedded systems security analysis the debugging process is also essential, so I have been dedicating myself to deeply understand the memory ope...
Getting shell on routers through UART
For some time, I’ve been thinking about why I haven’t written about what I’ve been researching, so I decided to start this blog showing how to access a router’s shell through a UART communication i...