How to get local root shell on the LG HR598 Bluray

28 Nov 2020 · 12 min

Author : Viking

For a long time I was wondering how to pwn embedded (or IoT) devices. I managed to get a root shell on my old LG HR 598 Bluray player, here is some notes about my hardware hacking journey.

Pimp my PID - get SYSTEM using Windows kernel

16 May 2020 · 19 min

Author : Viking

During my journey into the Windows Kernel I found interesting to create a tool to elevate any process to SYSTEM using a driver. Here are some details about that.

Rconfig - From zero to (root)shell

08 Dec 2019 · 12 min

Author : Viking

Looking at the Rconfig 3.9 source code lead to find several security bugs which can be chained in order to get unauthenticated (root) remote code execution.