mkiesel.chhttps://mkiesel.ch/manu's blogenMon, 31 Aug 2026 00:00:00 +0000Hacking the Pixii CameraPwning a niche photo camera without actually owning ithttps://mkiesel.ch/posts/pixii/@rtfmkieselhttps://mkiesel.ch/posts/pixii/Mon, 31 Aug 2026 00:00:00 +0000https://mkiesel.ch/static/images/meta/1c679740932a.jpgRoll with Advantage: Vulnerabilities in Lenovo VantageA technical deep dive into the lands of Lenovo Vantage and its add-ins, including tooling to help you hunt for vulnerabilitieshttps://mkiesel.ch/posts/lenovo-vantage/@rtfmkieselhttps://mkiesel.ch/posts/lenovo-vantage/Mon, 09 Feb 2026 00:00:00 +0000https://mkiesel.ch/static/images/meta/d38bd5c25e8a.jpgCordaware: Privesc by Changing an IP AddressLPE in the Cordaware bestinformed Infoclient (CVE-2025-0425)https://mkiesel.ch/posts/cordaware/@rtfmkieselhttps://mkiesel.ch/posts/cordaware/Tue, 18 Feb 2025 00:00:00 +0000https://mkiesel.ch/static/images/meta/797f52957ced.jpgSwiss Tax Adventures 2: The N-Day and the Rabbit HoleTales from installing 16 Swiss tax applicationshttps://mkiesel.ch/posts/swiss-tax-adventures-2/@rtfmkieselhttps://mkiesel.ch/posts/swiss-tax-adventures-2/Fri, 29 Nov 2024 00:00:00 +0000https://mkiesel.ch/static/images/meta/2b89b4c5ebb3.jpgSwiss Tax Adventures 1: The Forbidden Jar of XXEDiscovering a mass XXE in Swiss tax applications (CVE-2024-8602)https://mkiesel.ch/posts/swiss-tax-adventures-1/@rtfmkieselhttps://mkiesel.ch/posts/swiss-tax-adventures-1/Sun, 20 Oct 2024 00:00:00 +0000https://mkiesel.ch/static/images/meta/786e4599c433.jpgPersistence with VSCode Plugin backdoorsHow to achieve persistence by backdooring installed VSCode pluginshttps://mkiesel.ch/posts/vscode-plugin-persistence/@rtfmkieselhttps://mkiesel.ch/posts/vscode-plugin-persistence/Sun, 30 Jun 2024 00:00:00 +0000https://mkiesel.ch/static/images/meta/d405653f5af1.jpgCOMfiltrat0r: Exfiltrating Data Like It's 1995Finding a way to bypass USB storage poilicies using WebSerial and a microcontrollerhttps://mkiesel.ch/posts/comfiltrat0r/@rtfmkieselhttps://mkiesel.ch/posts/comfiltrat0r/Wed, 25 Oct 2023 00:00:00 +0000https://mkiesel.ch/static/images/meta/4a7cc933aa27.jpgD-Link DNR-322L: Authenticated RCEHow I gained RCE on a DVR by uploading a malicious backup (CVE-2022-40799)https://mkiesel.ch/posts/dlink-dnr322/@rtfmkieselhttps://mkiesel.ch/posts/dlink-dnr322/Tue, 27 Sep 2022 00:00:00 +0000https://mkiesel.ch/static/images/meta/ebd298104a6e.jpg