Author
theblackturtle
Security Researcher
Works on web application and authentication research, and maintains several of the open-source reconnaissance tools Unit 515 contributes to.
Research by theblackturtle
3 publications
Chaining a replayed login into full control of a home camera
Three flaws in a popular home camera combine into one path: replay a login, take an admin session, then inject commands into a diagnostic service. Here is how the chain works and how to shut it down.OS command executionCVE-2026-102369CVE-2026-15315CVE-2026-15316Testing public exploit claims for an SSO authentication bypass
Public proofs of concept for a widely reported SSO bypass did not work, so we rebuilt the conditions in the lab to find out what an attacker really needs.Authentication bypassWhen an AI agent trusts the tool description more than the user
Agents read tool descriptions as instructions. We show how a poisoned description in a shared tool server steers an agent, and how to review tools before you connect them.Instruction injection
