The Curious Engineer

All blogs / Security

Eaton Works Feed

eaton-works.com

The official site of Eaton Works.

SecurityWeb development

Posts
39 from 15 May 2011 to 24 Aug 2026
Posting
monthly (8 in the last year)
Kind
personal blog
Feed
https://eaton-works.com/feed.atom

2026 7

  1. Tata’s B2B platform returned OTPs in API responses
  2. Exploiting Volvo/Eicher’s fleet management platform to gain control over all users and vehicles
  3. Inside an AI coal mine security camera network powered by plaintext passwords
  4. Exploiting vulnerabilities in Johnson & Johnson web apps
  5. Using cookies to hack into a tech college’s admission system
  6. Hacking a pharmacy to get free prescription drugs and more
  7. I’m The Captain Now: Hijacking a global ocean supply chain network

2025 5

  1. A Cracker Barrel vulnerability
  2. Hacking India’s largest automaker: Tata Motors
  3. (DEF CON 33) How I hacked over 1,000 car dealerships across the US
  4. Taking remote control over industrial generators
  5. Intel Outside: Hacking every Intel employee and various internal websites

2024 6

  1. I’m Lovin’ It: Exploiting McDonald’s APIs to hijack deliveries and order food for a penny
  2. How 1 Exposed Honeywell API Gave me Control Over an Internal Engineering System
  3. Gaining admin access to a Siemens cloud system
  4. Lessons in Securing Mobility Site Management APIs
  5. Angular-ing for AuthZ, Problematic anti-patterns in Single Sign On Systems
  6. Hacking into a Toyota/Eicher Motors insurance company by exploiting their premium calculator website

2023 8

  1. CVE-2023-6483: Improper/missing API authentication in ADiTaaS v5.1
  2. Tapping into a telecommunications company’s office cameras
  3. Compromising Honda’s power equipment / marine / lawn & garden dealer eCommerce platform through a vulnerable password reset API
  4. Insecure Toyota CRM exposed Mexican customer information
  5. Hacking into Toyota’s global supplier management network
  6. Syndication feed now available
  7. How the Xbox 360 knows if your hard-drive is genuine
  8. How Microsoft attempted to make the Xbox 360 dashboard load faster

2022 2

  1. Hacking into the worldwide Jacuzzi SmartTub network
  2. Microsoft accidentally exposed their private Xbox game developer forums

2021 1

  1. Building the new Eaton Works website

2019 1

  1. An experience with Daimler’s vulnerability reporting program

2018 1

  1. DevTool Source Code Released

2016 2

  1. Reverse engineering and removing Pokémon GO’s certificate pinning
  2. Now Fully HTTPS

2015 2

  1. DevTool Released
  2. FATXplorer update released

2013 1

  1. Transition to the Disqus commenting system

2012 1

  1. FATXplorer v2.5 released!

2011 2

  1. XePatch Released
  2. New Homepage!