Three Button Presses (Or Less) to Wireless RCE: How a stick gets you a shell on Flock Safety’s Police License Plate Cameras Over Wi-Fi A combination of reused default passwords, hidden triggers, and completely unauthenticated APIs results in reliable wireless RCE, data disclosure, and device control in the field on Flock Safety&#8…

gainsec.com/2025/09/27/t...

27.09.2025 20:57 — 👍 1    🔁 1    💬 1    📌 0

Grounded Flight – Device 2: Root Shell on Flock Safety’s Falcon/Sparrow Automated License Plate Reader Onto the next! In case you missed the previous two posts; where I went over what Flock Safety and what these devices are, and then information and vulnerabilities (and how to get console access) I …

Someone beat me to acquiring one of those Flock Safety cameras and doing a teardown and analysis of it. Oh well… interesting read nonetheless. Who would have guessed they run Android Things.

gainsec.com/2025/06/19/g...

08.09.2025 00:57 — 👍 8    🔁 4    💬 2    📌 0

More coming re these devices at the end of this month!

13.09.2025 08:07 — 👍 1    🔁 0    💬 1    📌 0

Wait until I publish the article defining it fully!

13.09.2025 08:06 — 👍 0    🔁 0    💬 0    📌 0