corpus.blog
41554 blogs · [ { "id": "01a08771-0fc8-7334-a782-415645ccc657", "title": "Tata’s B2B platform returned OTPs in API responses", "url": "https://eaton-works.com/2026/08/24/tata-nexarc-hack/", "published_at": "2026-08-24T14:25:14+00:00" }, { "id": "01a08771-0fc8-7334-a782-415645d73a0c", "title": "Exploiting Volvo/Eicher’s fleet management platform to gain control over all users and vehicles", "url": "https://eaton-works.com/2026/07/27/my-eicher-hack/", "published_at": "2026-07-27T14:31:47+00:00" }, { "id": "01a08771-0fc8-7334-a782-4156463b74a1", "title": "Inside an AI coal mine security camera network powered by plaintext passwords", "url": "https://eaton-works.com/2026/07/08/coal-india-camera-hack/", "published_at": "2026-07-08T17:07:38+00:00" }, { "id": "01a08771-0fc8-7334-a782-415646d485a3", "title": "Exploiting vulnerabilities in Johnson & Johnson web apps", "url": "https://eaton-works.com/2026/06/24/jnj-webapp-hacks/", "published_at": "2026-06-24T16:11:49+00:00" }, { "id": "01a08771-0fc8-7334-a782-4156479b207d", "title": "Using cookies to hack into a tech college’s admission system", "url": "https://eaton-works.com/2026/03/09/skcet-hack/", "published_at": "2026-03-09T13:41:25+00:00" }, { "id": "01a08771-0fc8-7334-a782-415647afd636", "title": "Hacking a pharmacy to get free prescription drugs and more", "url": "https://eaton-works.com/2026/02/13/dava-india-hack/", "published_at": "2026-02-14T03:07:20+00:00" }, { "id": "01a08771-0fc8-7334-a782-415647b986a7", "title": "I’m The Captain Now: Hijacking a global ocean supply chain network", "url": "https://eaton-works.com/2026/01/14/bluspark-bluvoyix-hack/", "published_at": "2026-01-14T15:05:15+00:00" }, { "id": "01a08771-0fc8-7334-a782-4156485650e6", "title": "A Cracker Barrel vulnerability", "url": "https://eaton-works.com/2025/11/17/cracker-barrel-hack/", "published_at": "2025-11-17T15:31:02+00:00" }, { "id": "01a08771-0fc8-7334-a782-4156485994fc", "title": "Hacking India’s largest automaker: Tata Motors", "url": "https://eaton-works.com/2025/10/28/tata-motors-hack/", "published_at": "2025-10-29T01:05:40+00:00" }, { "id": "01a08771-0fc8-7334-a782-41564865a348", "title": "(DEF CON 33) How I hacked over 1,000 car dealerships across the US", "url": "https://eaton-works.com/2025/10/13/def-con-33/", "published_at": "2025-10-13T15:13:09+00:00" }, { "id": "01a08771-0fc8-7334-a782-4156494d29e7", "title": "Taking remote control over industrial generators", "url": "https://eaton-works.com/2025/10/06/industrial-generator-hack/", "published_at": "2025-10-06T15:13:20+00:00" }, { "id": "01a08771-0fc8-7334-a782-41564a4be9d0", "title": "Intel Outside: Hacking every Intel employee and various internal websites", "url": "https://eaton-works.com/2025/08/18/intel-outside-hack/", "published_at": "2025-08-18T14:15:43+00:00" }, { "id": "01a08771-0fc8-7334-a782-41564a95b432", "title": "I’m Lovin’ It: Exploiting McDonald’s APIs to hijack deliveries and order food for a penny", "url": "https://eaton-works.com/2024/12/19/mcdelivery-india-hack/", "published_at": "2024-12-19T13:00:22+00:00" }, { "id": "01a08771-0fc8-7334-a782-41564add339b", "title": "How 1 Exposed Honeywell API Gave me Control Over an Internal Engineering System", "url": "https://eaton-works.com/2024/08/19/honeywell-bedq-hack/", "published_at": "2024-08-19T04:00:00+00:00" }, { "id": "01a08771-0fc8-7334-a782-41564b435f73", "title": "Gaining admin access to a Siemens cloud system", "url": "https://eaton-works.com/2024/07/31/siemens-ama-hack/", "published_at": "2024-07-31T04:00:00+00:00" }, { "id": "01a08771-0fc8-7334-a782-41564bd2a309", "title": "Lessons in Securing Mobility Site Management APIs", "url": "https://eaton-works.com/2024/05/16/jnj-mobility-hack/", "published_at": "2024-05-16T04:00:00+00:00" }, { "id": "01a08771-0fc8-7334-a782-41564c73c483", "title": "Angular-ing for AuthZ, Problematic anti-patterns in Single Sign On Systems", "url": "https://eaton-works.com/2024/03/05/f500-app-hack/", "published_at": "2024-03-05T05:00:00+00:00" }, { "id": "01a08771-0fc8-7334-a782-41564d3cd5c4", "title": "Hacking into a Toyota/Eicher Motors insurance company by exploiting their premium calculator website", "url": "https://eaton-works.com/2024/01/17/ttibi-email-hack/", "published_at": "2024-01-17T16:25:39+00:00" }, { "id": "01a08771-0fc8-7334-a782-41564dbcc803", "title": "CVE-2023-6483: Improper/missing API authentication in ADiTaaS v5.1", "url": "https://eaton-works.com/2023/12/18/aditaas-cve-2023-6483/", "published_at": "2023-12-18T15:52:29+00:00" }, { "id": "01a08771-0fc8-7334-a782-41564dcbddc1", "title": "Tapping into a telecommunications company’s office cameras", "url": "https://eaton-works.com/2023/11/14/telecom-camera-hack/", "published_at": "2023-11-14T18:53:08+00:00" }, { "id": "01a08771-0fc8-7334-a782-41564e9efa7f", "title": "Compromising Honda’s power equipment / marine / lawn & garden dealer eCommerce platform through a vulnerable password reset API", "url": "https://eaton-works.com/2023/06/06/honda-ecommerce-hack/", "published_at": "2023-06-06T15:33:57+00:00" }, { "id": "01a08771-0fc8-7334-a782-41564f526d5c", "title": "Insecure Toyota CRM exposed Mexican customer information", "url": "https://eaton-works.com/2023/03/06/toyota-c360-hack/", "published_at": "2023-03-06T17:52:27+00:00" }, { "id": "01a08771-0fc8-7334-a782-4156501f5d99", "title": "Hacking into Toyota’s global supplier management network", "url": "https://eaton-works.com/2023/02/06/toyota-gspims-hack/", "published_at": "2023-02-06T16:22:56+00:00" }, { "id": "01a08771-0fc8-7334-a782-41565039ccfa", "title": "Syndication feed now available", "url": "https://eaton-works.com/2023/01/28/syndication-feed-now-available/", "published_at": "2023-01-28T17:38:46+00:00" }, { "id": "01a08771-0fc8-7334-a782-415650feb0b0", "title": "How the Xbox 360 knows if your hard-drive is genuine", "url": "https://eaton-works.com/2023/01/24/how-the-xbox-360-knows-if-your-hard-drive-is-genuine/", "published_at": "2023-01-24T18:27:21+00:00" }, { "id": "01a08771-0fc8-7334-a782-41565170d45b", "title": "How Microsoft attempted to make the Xbox 360 dashboard load faster", "url": "https://eaton-works.com/2023/01/09/how-microsoft-attempted-to-make-the-xbox-360-dashboard-load-faster/", "published_at": "2023-01-09T16:48:31+00:00" }, { "id": "01a08771-0fc8-7334-a782-41565221c126", "title": "Hacking into the worldwide Jacuzzi SmartTub network", "url": "https://eaton-works.com/2022/06/20/hacking-into-the-worldwide-jacuzzi-smarttub-network/", "published_at": "2022-06-20T17:42:59+00:00" }, { "id": "01a08771-0fc8-7334-a782-415652e9dd91", "title": "Microsoft accidentally exposed their private Xbox game developer forums", "url": "https://eaton-works.com/2022/01/31/microsoft-accidentally-exposed-their-private-xbox-game-developer-forums/", "published_at": "2022-01-31T17:56:48+00:00" }, { "id": "01a08771-0fc8-7334-a782-415653c67d63", "title": "Building the new Eaton Works website", "url": "https://eaton-works.com/2021/11/15/building-the-new-eaton-works-website/", "published_at": "2021-11-15T22:50:41+00:00" }, { "id": "01a08771-0fc8-7334-a782-41565488b86a", "title": "An experience with Daimler’s vulnerability reporting program", "url": "https://eaton-works.com/2019/12/19/an-experience-with-daimlers-vulnerability-reporting-program/", "published_at": "2019-12-19T19:13:31+00:00" }, { "id": "01a08771-0fc8-7334-a782-41565556462d", "title": "DevTool Source Code Released", "url": "https://eaton-works.com/2018/08/25/devtool-source-code-released/", "published_at": "2018-08-25T23:04:44+00:00" }, { "id": "01a08771-0fc8-7334-a782-4156558afeb8", "title": "Reverse engineering and removing Pokémon GO’s certificate pinning", "url": "https://eaton-works.com/2016/07/31/reverse-engineering-and-removing-pokemon-gos-certificate-pinning/", "published_at": "2016-07-31T06:59:28+00:00" }, { "id": "01a08771-0fc8-7334-a782-415655bf8fa3", "title": "Now Fully HTTPS", "url": "https://eaton-works.com/2016/07/16/now-fully-https/", "published_at": "2016-07-17T00:50:18+00:00" }, { "id": "01a08771-0fc8-7334-a782-41565663f18e", "title": "DevTool Released", "url": "https://eaton-works.com/2015/07/27/devtool-released/", "published_at": "2015-07-27T22:41:53+00:00" }, { "id": "01a08771-0fc8-7334-a782-41565726a5c2", "title": "FATXplorer update released", "url": "https://eaton-works.com/2015/03/27/fatxplorer-update-released/", "published_at": "2015-03-27T04:32:54+00:00" }, { "id": "01a08771-0fc8-7334-a782-4156578a5937", "title": "Transition to the Disqus commenting system", "url": "https://eaton-works.com/2013/09/14/transition-to-the-disqus-commenting-system/", "published_at": "2013-09-14T18:59:34+00:00" }, { "id": "01a08771-0fc8-7334-a782-415657a30c5d", "title": "FATXplorer v2.5 released!", "url": "https://eaton-works.com/2012/12/27/fatxplorer-v2-5-released/", "published_at": "2012-12-27T20:29:59+00:00" }, { "id": "01a08771-0fc8-7334-a782-4156584d41c5", "title": "XePatch Released", "url": "https://eaton-works.com/2011/08/20/xepatch-released/", "published_at": "2011-08-20T21:09:52+00:00" }, { "id": "01a08771-0fc8-7334-a782-415658a2ad0b", "title": "New Homepage!", "url": "https://eaton-works.com/2011/05/15/new-homepage/", "published_at": "2011-05-15T20:23:28+00:00" } ] posts Claim your blog
Back to eaton-works.com
Blog · corpus.blog/blogs/eaton-works.com/posts

eaton-works.com

eaton-works.com

2026

Tata’s B2B platform returned OTPs in API responsesoriginal ↗
24 Aug 2026
Exploiting Volvo/Eicher’s fleet management platform to gain control over all users and vehiclesoriginal ↗
27 Jul 2026
Inside an AI coal mine security camera network powered by plaintext passwordsoriginal ↗
8 Jul 2026
Exploiting vulnerabilities in Johnson & Johnson web appsoriginal ↗
24 Jun 2026
Using cookies to hack into a tech college’s admission systemoriginal ↗
9 Mar 2026
Hacking a pharmacy to get free prescription drugs and moreoriginal ↗
14 Feb 2026
I’m The Captain Now: Hijacking a global ocean supply chain networkoriginal ↗
14 Jan 2026

2025

A Cracker Barrel vulnerabilityoriginal ↗
17 Nov 2025
Hacking India’s largest automaker: Tata Motorsoriginal ↗
29 Oct 2025
(DEF CON 33) How I hacked over 1,000 car dealerships across the USoriginal ↗
13 Oct 2025
Taking remote control over industrial generatorsoriginal ↗
6 Oct 2025
Intel Outside: Hacking every Intel employee and various internal websitesoriginal ↗
18 Aug 2025

2024

I’m Lovin’ It: Exploiting McDonald’s APIs to hijack deliveries and order food for a pennyoriginal ↗
19 Dec 2024
How 1 Exposed Honeywell API Gave me Control Over an Internal Engineering Systemoriginal ↗
19 Aug 2024
Gaining admin access to a Siemens cloud systemoriginal ↗
31 Jul 2024
Lessons in Securing Mobility Site Management APIsoriginal ↗
16 May 2024
Angular-ing for AuthZ, Problematic anti-patterns in Single Sign On Systemsoriginal ↗
5 Mar 2024
Hacking into a Toyota/Eicher Motors insurance company by exploiting their premium calculator websiteoriginal ↗
17 Jan 2024

2023

CVE-2023-6483: Improper/missing API authentication in ADiTaaS v5.1original ↗
18 Dec 2023
Tapping into a telecommunications company’s office camerasoriginal ↗
14 Nov 2023
Compromising Honda’s power equipment / marine / lawn & garden dealer eCommerce platform through a vulnerable password reset APIoriginal ↗
6 Jun 2023
Insecure Toyota CRM exposed Mexican customer informationoriginal ↗
6 Mar 2023
Hacking into Toyota’s global supplier management networkoriginal ↗
6 Feb 2023
Syndication feed now availableoriginal ↗
28 Jan 2023
How the Xbox 360 knows if your hard-drive is genuineoriginal ↗
24 Jan 2023
How Microsoft attempted to make the Xbox 360 dashboard load fasteroriginal ↗
9 Jan 2023

2022

Hacking into the worldwide Jacuzzi SmartTub networkoriginal ↗
20 Jun 2022
Microsoft accidentally exposed their private Xbox game developer forumsoriginal ↗
31 Jan 2022

2021

Building the new Eaton Works websiteoriginal ↗
15 Nov 2021

2019

An experience with Daimler’s vulnerability reporting programoriginal ↗
19 Dec 2019

2018

DevTool Source Code Releasedoriginal ↗
25 Aug 2018

2016

Reverse engineering and removing Pokémon GO’s certificate pinningoriginal ↗
31 Jul 2016
Now Fully HTTPSoriginal ↗
17 Jul 2016

2015

DevTool Releasedoriginal ↗
27 Jul 2015
FATXplorer update releasedoriginal ↗
27 Mar 2015

2013

Transition to the Disqus commenting systemoriginal ↗
14 Sept 2013

2012

FATXplorer v2.5 released!original ↗
27 Dec 2012

2011

XePatch Releasedoriginal ↗
20 Aug 2011
New Homepage!original ↗
15 May 2011