<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0">
  <channel>
    <title>mh0m</title>
    <link>https://mh0m.com</link>
    <description>Notes on reverse engineering, exploitation, and CTF.</description>
    <item>
      <title>The forgotten sibling: unauthenticated RCE in Yamcs mission control</title>
      <link>https://mh0m.com/posts/2026-10-03-yamcs-forgotten-sibling.html</link>
      <guid>https://mh0m.com/posts/2026-10-03-yamcs-forgotten-sibling.html</guid>
      <pubDate>Sat, 03 Oct 2026 00:00:00 +0000</pubDate>
      <description>Yamcs patched a YAML template injection but left its twin — the reconfigure path — on the old unsafe renderer. One unauthenticated request runs a shell command on mission control.</description>
    </item>
    <item>
      <title>whoami</title>
      <link>https://mh0m.com/posts/2026-01-15-hello-world.html</link>
      <guid>https://mh0m.com/posts/2026-01-15-hello-world.html</guid>
      <pubDate>Thu, 15 Jan 2026 00:00:00 +0000</pubDate>
      <description>Starting a place to dump notes on reversing, pwn, and CTF.</description>
    </item>
  </channel>
</rss>
