Network & Host No Output, No Problem: Proving Blind RCE Over DNS on a Door-Control System
A Synack researcher proves blind command injection on a Nortek eMerge E3 access-control system, then exfiltrates data out-of-band over DNS.
Home > Archives by Shea Norwood
Shea Norwood
Shea Norwood, aka 0xbadg3r, is an offensive security specialist on the Synack Red Team. He has a background as a full-stack web developer and holds several industry certifications including the GPEN, GWAPT, GCIH, GSEC, Security+, CEH, CHFI, CTIA, and serves on the GIAC Advisory Board. He was inducted into the elite Synack Acropolis program in 2025 and has twice earned Synack's 15-for-15 award. Shea holds a bachelor's degree, two master's degrees, and an undergraduate certificate in Applied Cybersecurity from the SANS Technology Institute.