Augusto

How an afternoon of poking a 3D printer firmware with a stick turned into full compromise.

From a popped shell to full Kubernetes cluster compromise — exploiting GCP metadata, kubelet credentials, and CSR auto-approval to bypass RBAC.

Abusing Python’s floating point arithmetic to forge JWT-like tokens — when float(‘inf’) meets type juggling.