Sammy Azdoufal (n0tsa)

Expert
@xn0tsa

not a security engineer

fcrew. Another CrewAI fork

46

nobody-puts-baby-in-a-corner. Five CVEs against Meari/CloudEdge IoT camera platform — public disclosure 2026-05-11

43

dji-romo-video-control. Live video stream & remote control for DJI Romo robot vacuums (keyboard + PS5 DualSense gamepad)

34

Web2LLM. An advanced Python tool for extracting data from websites, cleaning the content, and converting it to high-quality Markdown for optimal use by LLM systems.

23

because-i-got-high. 1.08M cannabis club members, 985K ID scans, no authentication required — CCS Nube / PuffPal disclosure

19

dji-home-credential-extractor. Extract DJI Home (Romo robot vacuum) credentials from Android emulator for MQTT/Home Assistant integration

13

dji-fly-credential-extractor. Extract DJI Fly credentials from an Android emulator to access DJI cloud APIs (flight records, drone info, account)

6

thrustfucker. Thrustmaster TCA Sidestick X turned pentest tool. Full RE + custom firmware (BadUSB, RNDIS, C2, fuzzer, audio covert channel). No screwdriver needed.

1

theres-no-place-like-home. Ten CVEs against the Aqara/Lumi IoT cloud platform — public disclosure 2026-06-11

1
9
Apply