Roll with Advantage: Hacking Lenovo Vantage
A technical deep dive into the lands of Lenovo Vantage and its add-ins, including tooling to help you hunt for vulnerabilities
mkiesel.ch
manu's blog
Latest posts
Getting SYSTEM by Changing an IP Address
LPE in the Cordaware bestinformed Infoclient (CVE-2025-0425)
Swiss Tax Adventures 2: The N-Day and the Rabbit Hole
Tales from installing 16 Swiss tax applications
Swiss Tax Adventures 1: The Forbidden Jar of XXE
Discovering a mass XXE in Swiss tax applications (CVE-2024-8602)
Running mitmproxy on a Raspberry Pi
A guide on how to set up mitmproxy on a Raspberry Pi for LAN and Wi-Fi MitM
Persistence with VSCode Plugin backdoors
How to achieve persistence by backdooring installed VSCode plugins
Instrumentalizing Electron: Proxy Injection
How to force Electron applications into using your HTTP proxy
Exfiltrating Data Like It's 1995
Bypassing USB poilicies using WebSerial and microcontrollers
D-Link DNR-322L: Authenticated RCE
How I gained RCE on a DVR by uploading a malicious backup (CVE-2022-40799)
UART, uBoot, u root
Getting a root shell on the D-Link DCS-5222 by manipulating uBoot parameters via UART
Abusing User Habits with Evil Bookmarks
Replacing bookmarks post-exploit for fun and profit
A Poor Attempt at Hacking My Toothbrush
Investigating possible planned obsolescence in my toothbrush
Post-Exploit Phishing with PowerShell
Using PowerShell to make post-exploit phishing forms