Posts

When Yallo removes bridge mode on my Home Router after explicitly promising it, then I’ll just re-enable it myself - even if it means desoldering the NAND and extracting the raw firmware.

A collection of smaller home automation projects built on open source solutions from others. From magically opening entrance doors to RGB ambience behind every piece of furniture, and a standing desk that obeys Siri.

My friends built me a custom CTF for my 26th birthday. It had QR codes hidden in birthday cards, physical flags at ETH, and an ESP32 “rowhammer” challenge. A tale of caffeine addiction and hardware security trauma.

A writeup about exploiting an image converter service through path traversal and multiprocessing pickle deserialization. The solution required crafting a polyglot file that’s both a valid BMP image and a malicious pickle payload to achieve RCE.

A writeup for EPFL CS412’s HEAP-MEANU challenge involving heap exploitation through one-byte overflow and constrained brute-force reading. Despite full protections and modern libc 2.39, achieved RCE using a House of Spirits like attack.

How I used an ESP, magnets, and Kubernetes to solve the great toilet crisis of 2021. A tale of absolutely necessary workplace optimization.

How I made my apartment entrance buzz me in after authenticating my phone over BLE. It also opened the door once while I was driving past.

When your loft flat turns into a sauna every summer, the logical solution is obviously to reverse-engineer a decades-old proprietary bus protocol. The final implementation makes an ESP8266 impersonate the bus by abusing UART at 5924 baud.

How I reverse-engineered my electric sofa to work with Home Assistant using an ESP32. After frying a transistor and some emergency soldering, I now have a voice-controlled couch.