RSSAmplifier

Blog

InfoSec @ rm-it

infosec.rm-it.deRSS feed ↗10 posts

Latest posts

Microsoft Edge Developer VM Remote Code Execution

The Microsoft Edge Developer VMs were images that Microsoft published to test out your website with different versions of Edge or Internet Explorer. The VMs contained a fully setup Windows with a limited license. I found a way to execute Continue reading

Circumvention of Apple iOS Mail App “Different Reply Address” warning

A while ago I noticed a new warning in the Apple iOS Mail App that appears if you get an email from one email address, the reply-to header is set to a different email address and the display names are Continue reading

Blurams Lumi Security Camera analysis

Continuing the series of analysing cloud enabled devices (see BASETech IP camera and Meross Garage Door Opener for previous research), we have taken a look at the Blurams Lumi Security Camera (A31C). This research and blog post was created in Continue reading

HackTheBox Business CTF 2022 – Trade

The HackTheBox Business CTF 2022 challenge Trade in the Cloud category started with the usual nmap scan which revealed the open ports 22, 80, 3690. On port 80, the web interface only presents a login interface. 3690 is the port Continue reading

Meross Smart Wi-Fi Garage Door Opener analysis

Intro This post is another research project I conducted while in COVID-19 lockdown. The Meross Smart Wi-Fi Garage Door Opener (MSG100, firmware version 3.1.15, hardware version 3.5.0) is an addition you can add to your existing garage door opener. This Continue reading

BASETech IP camera analysis

Intro This post in depth describes my analysis of the BASETech (GE-131 BT-1837836) IP camera and the vulnerabilities resulting from this research. This is a rather long blog post, if you are only interested in the vulnerabilities you can skip Continue reading

HackTheBox – Obscurity

The HackTheBox machine Obscurity started with the usual nmap scan, it only revealed two open ports: Nmap scan report for 10.10.10.168 Host is up (0.030s latency). Not shown: 65531 filtered ports PORT STATE SERVICE 22/tcp open ssh 80/tcp closed http Continue reading

HackTheBox – Traverxec

The HackTheBox machine Traverxec only had two open ports: Nmap scan report for 10.10.10.165 Host is up (0.053s latency). Not shown: 65533 filtered ports PORT STATE SERVICE 22/tcp open ssh 80/tcp open http The website presented was a static site Continue reading

HackTheBox – Postman

The initial nmap scan for the HackTheBox machine Postman revealed a few open ports: # Nmap 7.80 scan initiated Sun Nov 3 14:41:26 2019 as: nmap -p- -o nmap_full 10.10.10.160 Nmap scan report for 10.10.10.160 Host is up (0.045s latency). Continue reading

HackTheBox – Bitlab

The initial nmap scan of the HackTheBox machine Bitlab only showed two open ports: # Nmap 7.80 scan initiated Sun Sep 15 03:20:33 2019 as: nmap -p- -o nmap_full 10.10.10.114 Nmap scan report for 10.10.10.114 Host is up (0.028s latency). Continue reading