Olivia Lucca Fraser

A backdoor lockpick for Phicomm's routers

2

Committing a PoC for the backdoors discussed here: https://medium.com/tenable-techblog/a-backdoor-lockpick-d847a83f4496 Verified to work on all known models and firmware versions of Phicomm routers (at least those released in the last few...

Relative path traversal allows anyone with the URL to write to files outside of the vault

2

If an attacker were to come into possession of the webhook URL, they would be able to append to any file for which the obsidian user has write permissions. If,...

added spec for opkg PURL type

1

I wrote up a spec for the `opkg` PURL type, which I think we should use as a root type instead of `openwrt` (which is currently stubbed out but not...

Hey, I'm just watching your def con talk right now. This is a really exciting project. I'm working on a genetic exploit engine, myself (a rop-chain evolver called "roper"), and...