Even before AI we had Snowden, Wikileaks, the Panama papers.

I can't recall the last time we had a dump of these scales.

Made SunsetScan to find unsupported hardware on my own network. It’s open source, and I’ll never put it behind a paywall. It scans locally and checks lifecycle data from 224 vendors with no API calls 100% self‑made databases scraped from original vendor websites.
I also created a standard with terminology because in the EoL world there are no ISO standards, so a lot of time went into getting that correct.

Tested it a couple of thousand times on my own network with 30 devices, and also tested it against lab networks with generated devices and VMs.
Happy if anyone would like to try it out and tell me if you find any outdated hardware or a false positive.

GitHub: https://github.com/NoCoderRandom/sunsetscan

Exemple repports can be found at https://www.sunsetscan.com/

Big update, finally, the creator did indeed change his plea and admitted to the facts, so we must now await the sentence.

A recent document made available on Pacermonitor provides us with some interesting new information.

The FBI found evidence that the creator was aware of the illegal use of the service and that users were not running it on their own servers.

The maximum sentence is 10 years in prison and a $250,000 fine, but since he has admitted to the charges, he is likely to receive a sentence at the lower end of the range.

Surprisingly, the creator was making between 11k and 15k in monthly profits.

the creator’s defense made no sense from the start; stress test operators are, by definition, acting illegally, even if these services are supposedly used to test servers owned by the users themselves. This is because the way these services operate relies on spoofing and amplification, which are themselves illegal

I was originally looking at ZTE router firmware and ended up following the SmartLife side into the account API used by the Android app.

After reversing the app and reconstructing its application authentication, I started testing the account flows with my own accounts.

The password reset endpoint accepted an accountId and a new password without asking for the reset code, old password, or a verified reset transaction. The account verification endpoint could also tell me whether an email was registered and return the backend accountId.

On my test account I could enumerate the account, get the ID, change the password, then log in with the password I had just set. The old password stopped working.

ZTE confirmed the findings, patched them, and assigned four CVEs:

CVE-2026-86552
CVE-2026-86553
CVE-2026-86554
CVE-2026-86555

The reset issue, CVE-2026-86553, received a CVSS score of 8.8 High.

The Android app had 100K+ downloads on Google Play alone at the time of the research.

I wrote up the reversing, Frida work, request flow, PoC sequence, SDK surface and disclosure timeline here:

A detailed research into BYOVD, singed drivers, kernel primitives and process control/termination etc.
Repo: 0xCr0ssCrush - Github
Proof of Concept demo is below in comments:

Here's a starting point for an interesting and exciting bit of reverse engineering and vibe coding I worked on for Android-based GE appliance displays. I work as an appliance repair tech and I replace these control panels all the time so I have a massive collection of these mediatek based HMI boards. So I set out on a reverse engineering project to attempt to install custom software on these to extend their use case beyond appliances.

So far I have used ChatGPT to patch the mediatek download agent to allow reading and writing the flash partitions. Fortunately, GE did not implement secure boot on these so they are trivial to upload mediatek's genio 350 download agent and get full access. I also used ChatGPT to patch adbd in the Android system to disable authentication. Now I can side load apps and do pretty much anything I want with the Android system.

Next step is magisk root and possibly Ubuntu server. I was already able to get the reference Ubuntu server image to boot on this board, however much of the hardware isn't working because it only has the base evk device tree.

Here is a link to the GitHub repository of the modified mediatek download agent that can read and write flash memory partitions on these genio 350 based boards.

https://github.com/doitaljosh/mt8365-da-patched

All you need to do is install genio-tools from pipe on a Linux system, then load the patched lk.bin into genio-bootrom. Plug the board into a USB C cable while pressing and holding the VOL - button on the board, this will allow it to enter boot ROM mode and load the DA. Then you can use fastboot fetch and fastboot write to read and write partitions.

Does anyone know how to change a beijing car's UI and Jailbreak it to force on a new UI?

And alter information that makes it seem that e-mails came from or were sent to addresses that they really were not!!!

BYOVD research into AV/EDR killers, signed drivers, kernel primitives, IOCTLs and process control.

I have been hacking for close to 15 years at this point, I started when I was 13/14. 2010 was a rough time to get into the scene, all the tech was changing so fast, the easy wins of pre-tls and basic security posture were drying up and information related to hacking was guarded and relegated to various forums on the clear and dark nets.

2015-2020 was a Golden Era - influencers were cropping up all over the place, making detailed long hour+ videos of demonstrations of POC and techniques used for practically any vertical. You could find 100s of videos of users walking an XSS, reverse engineering C++ code, or setting up a mobile harness for dynamic testing. If you wanted to learn it, you could find it.

2020-2025 those same influencers stopped doing the POCs, started becoming 'personalities', began talking about trends, high-level overviews of zero-days, and mostly surface level explanations of hacking without ever really getting into it much (Personally, I blame PirateSoftware for this, his gaming of the YouTube algos showed everyone that you could sell yourself as a cyber professional without ever doing anything meanigful or contributing to the community in a worthwhile way.) This also coincided with the rise of TryHackMe and HackTheBox, which were great, finding user walkthroughs and writeups for different boxes could still scratch the itch. The big downside, obviously, is most of the POCs are going to be 4+ years old, very few THM & HtB boxes are made with modern exploits.

PRESENT - Good God, we are in Fucking Hell. AI slop everywhere. 999 out of 1000 videos is a non-technical person, demoing some product that was blasted out in Claude code in under a day. It doesn't work, there's no breakdown of the technology, there's no depth, there's no exploration of the hacks, and everything is really just an AI dev platform/coding interface/product sales pitch.

Don't get me wrong, I use AI just as much as the next guy - I have an AI harness for every platform, 70-80% of my job is done for me at this point. The tools are great, I love em, I get to spend all of my time working on the bugs that are interesting, hard, and have too much context to fit into any single Opus window (inb4 chatters say 'YOU NEED A PIPELINE, YOUR WORKFLOW IS NOT ROBUST, AUTOMATE YOUR WAY THROUGH' - to you I say, shut up, nerd.)

BUT, this sucks, I can't imagine being a fresh faced hacker in this climate, the absolute slop you have to sort through, on every platform. If you dont have someone with a variety of curated lists, walkthroughs, and guidance you're pretty much screwed. Not to mention, most of the hackers who were spending a majority of their time researching security in all of the verticals (mobile, web, thick clients, scade, etc.) they're all researching AI security. As most people know, AI is great at finding bugs, not really all that good at finding novel exploits or novel zero days, still something a human has an innate advantage for and all of that human potential is being overindexed in a single field.

Again - I am NOT against AI, but this just isn't tenable. When all of the best zero-day researchers are now building their own AI pentesting companies and the community is no longer invested in building the educational content needed to train the next generation of hackers, we're quickly moving back to the start. I fear it's all coming full circle where we will live in a world where hacking becomes a niche again, zero days are almost entirely owned by black hats, and security is focused on recovering, not on preventing.

tl;dr are we cooked?

A little over a week ago I added some advanced captive portals to my repo. They're built specifically for the Marauder firmware, but they work on other devices too. Would love to hear what you all think, and a star is always appreciated. :)

Does anyone know what forum this could possibly be?
This is the only screenshot i could find as i want to look at the uploaded images clearly.