samcurry.netblogdiscordabout

Hacking Two Automakers: ForgeRock Path Confusion, RCE, and Remote Vehicle Access

Nov 7, 2026·21 min read

Shubham Shah and Sam Curry chained a ForgeRock WAF bypass into code execution on the identity systems of two automakers, then demonstrated remote vehicle control in the US.

Leaking the WARDOGS Server Binary via Remote Code Execution on a Hosting Partner

Nov 6, 2026·5 min read

When WARDOGS announced that their server binary would be available only privately to a few selected hosting providers, I became curious as to why, and then found a vulnerability that let me download it (along with secret keys used to manage player bans, cash, gold bars, and XP).

Hacking the World Poker Tour: Inside ClubWPT Gold’s Back Office

Oct 12, 2025·7 min read

In June, 2025, Shubs Shah and I discovered a vulnerability in the online poker website ClubWPT Gold which would have allowed an attacker to fully access the core back office application that is used for all administrative site functionality.

Hacking Subaru: Tracking and Controlling Cars via the STARLINK Admin Panel

Jan 23, 2025·7 min read

On November 20, 2024, Shubham Shah and I discovered a security vulnerability in Subaru’s STARLINK admin panel that gave us unrestricted access to all vehicles and customer accounts in the United States, Canada, and Japan.

Hacking Kia: Remotely Controlling Cars With Just a License Plate

Sep 20, 2024·8 min read

On June 11th, 2024, we discovered a set of vulnerabilities in Kia vehicles that allowed remote control over key functions using only a license plate. These attacks could be executed remotely on any hardware-equipped vehicle in about 30 seconds, regardless of whether it had an active Kia Connect subscription.