Welcome to

This is a place for Kiernan Roche's blog, projects, and other resources. More info here.


mvpower_exec Metasploit module

February 1, 2017 18:04 in Programs and Tools

Pentest Partners, a UK-based security firm, published several vulnerabilites found in ARM-based MVPower brand DVRs last year, most notably an unauthenticated root shell exposed through the DVR's web interface. It appears that this is not a bug, but rather an intended feature, and that no firmware updates will be issued to disable it or allow users the option to do so.

Algorithm for determining string permutations

October 8, 2016 11:55 in Algorithms

I'm a member of the Framingham State Computer Science Club. Sometimes, we tackle algorithm questions for fun.