Security Audit: Scrapyd
In this post I'll write about the vulnerabilities discovered in scrapyd, the scrapy daemon. It's a full review of security issues and measures to take in »
Command injection in Khipu Firefox plugin
In April 2014 I reported a vulnerability in the Firefox plugin of Khipu, which comes by default with the Khipu package for Linux. I received a »
Exploiting the scraper
As some of you have noticed, the post frequency has been low in last years because I've been happily working full-time for more than two years »
Vulnerabilities in FiberHome HG110 and implications for Movistar
Update 1: Movistar, a day after this post was published, contacted me to solve the security problems. In this article I'll show two vulnerabilities found in »
D-Link DIR-600 Cross Site Scripting & Command Execution Video
D-Link DIR-600 is a cheap home router, currently unsupported in USA/Canada, but supported and widely used in Latin America. In February 2011, I sent vulnerability »