Homelab
Pictures and description of my homelab
Posts
Highway to Critical Heaven: Scaling Vulnerability Discovery Across Hundreds of Routers
My BSides Atlanta 2026 talk with Vipin B.: collecting and auditing firmware for hundreds of routers with our own tooling and AI agents, and the 40 critical findings that came out of it. Full slide deck embedded.
Ground Control to Major Tom: Eavesdropping on Orbit
My HackSpaceCon 2026 talk on the (in)security of the protocols holding low-earth orbit together AX.25, CCSDS, and DVB-S2. Full slide deck embedded.
Spectral DNA
Spectral DNA research poster.
Advent of Code 2025: Solving Puzzles with Industrial Ladder Logic
Taking an unconventional approach to Advent of Code by solving puzzles using Allen-Bradley Micro870 PLCs and ladder logic programming
Vulnerabilities in Cisco Stratix 5400: RCE Attack Chain
Security assessment uncovering GET-based authenticated RCE with no CSRF protection, password hash exposure, and privilege escalation in industrial Ethernet switches
DNP3 Timing Attack: Weaponizing Time Synchronization in Industrial Control Systems
A deep dive into exploiting DNP3's time synchronization mechanism to disrupt critical infrastructure operations
Dangers of IoT Devices Presentation
Presentation about the dangers of IoT devices given at CvCISO coffee talks
WWHF Badge Hacking: 2024 Deadwood & 2025 Mile High
Dumping and analyzing the ESP32 firmware on the Wild West Hacking Fest 2024 Deadwood and 2025 Mile High badges: NVS secrets, MQTT, flag solutions, and a few hardware fixes.
CyberForce 2024 Adventure Writeup
Solutions to Department of Energy CyberForce Adventure 2024 anomalies: browser-history forensics, WAF log analysis, steganography, C++ reversing, phishing triage, and trivia.