PinnedMarcel Rick-Cen | FOXGRID·Aug 12, 2025CVE-2025–41688: Bypassing Restrictions in an OT Remote Access DeviceA critical vulnerability in the device’s Lua runtime bypasses all sandboxing restrictions and allows arbitrary OS command execution as…A response icon1A response icon1
PinnedMarcel Rick-Cen | FOXGRID·Feb 17, 2025CVE-2024-57790: Uncovering Hardcoded Root Credentials on an ICS/OT Edge GatewayA ten-byte-long piece of information, hidden deep in the device’s memory, allowed me to gain full control over the device.A response icon3A response icon3
Marcel Rick-Cen | FOXGRID·Mar 14Weak Credentials in Industrial Routers: How Identical Hashes Led to Extending CVE-2024–45275This observation helped confirm that the issue was not limited to a single device and contributed to extending CVE-2024-45275
Marcel Rick-Cen | FOXGRID·Mar 9Root Shell on a POS Payment Terminal: Security Analysis of the Worldline Yomani XRWhat follows isn’t just a hack story — it’s a reminder of how real-world security often fails in silence. The Worldline Yomani XR is a…
Marcel Rick-Cen | FOXGRID·Oct 9, 2025Hacking for Hidden Access And Secret Functions in the Moxa NPort SeriesWe uncover hidden debug menus and bootloader access in Moxa NPort devices — where “maintenance mode” meets hardware hackers.
Marcel Rick-Cen | FOXGRID·Sep 28, 2025Secret knock: How MFG lets us open an undocumented bootloader on the Siemens Simatic S7–1200For ~0.5s after power-on the Siemens Simatic S7–1200 listens for the german greeting MFG, and drops into an undocumented bootloader!
Marcel Rick-Cen | FOXGRID·Aug 24, 2025No WGET, No XXD, No Problem: How I Exfiltrated Binaries from a Locked-Down Industrial Embedded…ICS/OT devices often run with extreme limitations. This article shows how to exfiltrate data without any of the usual file transfer tools.
Marcel Rick-Cen | FOXGRID·Jul 25, 2025I Wrote Malware That Targeted the German Federal Bureau of Information Security (BSI)Sounds dramatic, right? But yes — I did write malware that compromised systems inside the German Federal Bureau of Information Security…
Marcel Rick-Cen | FOXGRID·Mar 11, 2025Exploiting Siemens Simatic S7 Controllers with Python: A Look at SiemensScan.pyA simple 50kb python script can take control over Siemens Simatic S7 controllers. This article explores possibilites and mitigations.
Marcel Rick-Cen | FOXGRID·Jan 15, 2025ICS/OT Penetration Testing of Siemens HMI Panels: A Beginner’s GuideHuman-Machine Interface (HMI) panels serve as the critical bridge between operators and process controllers. Getting locked out from these…A response icon1A response icon1
