Web Hack List

Preliminary research

8 Out of 10 Banks in Belgium HATE This One Weird eID RCE

AI-collected research leads through 22 September 2026, including targeted additions between broader sweeps. Unranked, incomplete, not community-vetted, and subject to change.

Follows browser messages into native Belgian eID software and its library-loading interface. Replayable activation data, exposed PIN-token key material and loose DLL checks combine with download and path-resolution behavior to load a polyglot file; the deck separates demonstrated code execution from a simulated authentication-relay scenario.

Record

Researcher
James Arnott
Published by
DEF CON
Format
Whitepaper
Topic
Server

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of James Arnott, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .