's Avatar

@gainsec.bsky.social

3 Followers  |  0 Following  |  3 Posts  |  Joined: 13.09.2025  |  1.0585

Latest posts by gainsec.bsky.social on Bluesky

Preview
Three Button Presses (Or Less) to Wireless RCE: How a stick gets you a shell on Flock Safetyโ€™s Police License Plate Cameras Over Wi-Fi A combination of reused default passwords, hidden triggers, and completely unauthenticated APIs results in reliable wireless RCE, data disclosure, and device control in the field on Flock Safety&#8โ€ฆ

gainsec.com/2025/09/27/t...

27.09.2025 20:57 โ€” ๐Ÿ‘ 1    ๐Ÿ” 1    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0
Preview
Grounded Flight โ€“ Device 2: Root Shell on Flock Safetyโ€™s Falcon/Sparrow Automated License Plate Reader Onto the next! In case you missed the previous two posts; where I went over what Flock Safety and what these devices are, and then information and vulnerabilities (and how to get console access) I โ€ฆ

Someone beat me to acquiring one of those Flock Safety cameras and doing a teardown and analysis of it. Oh wellโ€ฆ interesting read nonetheless. Who would have guessed they run Android Things.

gainsec.com/2025/06/19/g...

08.09.2025 00:57 โ€” ๐Ÿ‘ 8    ๐Ÿ” 4    ๐Ÿ’ฌ 2    ๐Ÿ“Œ 0

More coming re these devices at the end of this month!

13.09.2025 08:07 โ€” ๐Ÿ‘ 1    ๐Ÿ” 0    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0

Wait until I publish the article defining it fully!

13.09.2025 08:06 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0