Hardware Security Researcherπ΅, IoT | Automotive | Medical device.
Pune, Mumbai
Joined September 2018
- Tweets280
- Following1.1K
- Followers513
- Likes2.6K
CVE-2026-5768 is now public π¨
Security vulnerabilities affecting the @FourthFrontier Frontier X2 and Frontier X Mobile Application have been publicly disclosed via CISA/VINCEE.
Research with @js0n37
cisa.gov/news-events/ics-medβ¦
@FourthFrontier #IoTSecurity #CyberSecurity
β‘πβπΈππββ‘ retweeted
Cybersecurity blog posts, writeups, papers, and tools
github.com/0xor0ne/awesome-lβ¦
#infosec
IoT Security Research (w/@js0n37 ) β From Chip to Cloud: Hacking Sonoff Smart Home Devices.
Found & disclosed:
πΉ CVE-2024-7206 β Firmware Extraction & SSL Pinning Bypass.
πΉ CVE-2024-7205 β Secondary user takeover.
Full: jerinsunny.github.io/blogs/iβ¦
#IoTSecurity #HardwareSecurity
β‘πβπΈππββ‘ retweeted
I successfully glitched the STM32F401 with the #PicoGlitcher. See mkesenheimer.github.io/blog/β¦ for more details. #VoltageGlitching #FaultInjection
β‘πβπΈππββ‘ retweeted
A RCE via Bluetooth that can lead threat actora to #PWN the vehicle and being able to conduct acoustic surveillance, take screenshots, dump contacts, etc! ππππ₯π΄ββ
i.blackhat.com/EU-24/Presentβ¦
β‘πβπΈππββ‘ retweeted
π Hey everyone! π
I'm excited to share my latest project: The Ultimate Hardware Hacking Gear Guide! π§π
It's a comprehensive e-zine packed with tools and tips for all hardware hacking enthusiasts. Check it out and let me know what you think!
github.com/jcldf/ultimate-haβ¦
Check out my new blog, coauthored with @js0n37 Learn how we unlocked Renesas RH850 security by breaking 16-byte ID code authentication using Voltage Glitching to extract firmware on Automotive ECUs.
Read the full article here: lnkd.in/d3zqKE6a
#AutomotiveSecurity
New Blog Post!
"Voltage glitching on STM32F4 MCU to bypass readout protection"
Read out the article from here: bit.ly/43YoVtn
@js0n37
#hardwaresecurity #faultinjection #voltageglitching #embeddedsecurity
β‘πβπΈππββ‘ retweeted
github.com/arunmagesh/hw_hacβ¦
V2 of Hardware Hacking Cheat Sheet. Not an artist so feel free to make it fancy.
β‘πβπΈππββ‘ retweeted
Look ma! No Fault injection but secure-boot bypass on ESP32 just by swapping CS line.
β‘πβπΈππββ‘ retweeted
Fault injection for bypassing secure boot in (Espressif) ESP32 CPUs
Credits @LimitedResults
limitedresults.com/2019/09/pβ¦
#embedded #iot #hardware #faultinjection #infosec
β‘πβπΈππββ‘ retweeted
Drone Security and Fault Injection Attacks By @GabrielGonzalez act-on.ioactive.com/acton/atβ¦
β‘πβπΈππββ‘ retweeted
Cool series to learn IoT/embedded devices reverse engineering (credits @Palantir555)
Debug Ports: buff.ly/3WGw513
Firmware: buff.ly/3WHNOFo
Data: buff.ly/3WRz5r4
Flash: buff.ly/3WKnhay
Digging the Firmware: buff.ly/3WUY50u
#iot
β‘πβπΈππββ‘ retweeted
Glitching the nRF52832 on a WatchPAT One. Similar to AirTag setup: Target is powered directly from the ChipWhisperer, on-board voltage regulator output used as trigger, crowbar on DEC1. Based on seminal work by @LimitedResults, @colinoflynn, @ghidraninja, and @LennertWo.
β‘πβπΈππββ‘ retweeted
A blog post on hacking Amazon's eero 6 Wi-Fi device. Inspired by @wrongbaud and @ghidraninja for their awesome work in the hardware hacking field.
#hardware #hacking #amazon #cybersecurity
markuta.com/eero-6-hacking-pβ¦
β‘πβπΈππββ‘ retweeted
i got almost 35 glitch per second and it can be optimised but it's okay. ill let it run overnight and plot some graphs!
I'll try to attack some real world chips without violating any nda's soon.
for the code you can check it here.
github.com/onekey-sec/FI-froβ¦
This is very simple implementation and arduino platform gives more capability to include more things.
β‘πβπΈππββ‘ retweeted
poor esp
raelize.com/blog/espressif-sβ¦
β‘πβπΈππββ‘ retweeted
Stealing the Bitlocker key from the TPM by snooping the public SPI bus. Read details about the VMK, boot flow, logic analysers, soldering to SPI streams astralvx.com/stealing-the-biβ¦
