Embedded hacking courses: https://xitter.cf/t.co/OgxN50zWNV
Joined December 2010
- Tweets1.9K
- Following107
- Followers7.7K
- Likes1.1K
/dev/ttyS0 retweeted
Today I'm introducing two new open source IoT firmware analysis tools:
Moria and Mithril
Moria is a firmware extraction tool just like binwalk and unblob, except for one major difference: ZERO external extractor dependencies!
No more relying on ancient and unmaintained extraction utilities with numerous bugs / patches.
EVERY filesystem extractor has been rewritten in 1st party C++ to be fast and flexible.
Mithril is moria's companion. It scans extracted filesystems for secrets and SBOM. Correlates CVEs. Syncs with NVD, EPSS and KEV datasets.
Check out my blog post where I kick the tires:
brownfinesecurity.com/blog/i…
/dev/ttyS0 retweeted
Had a blast doing this podcast!!
@nmatt0 is a hardware and #IoT security researcher. He joins Chris to talk about best practices for securing hardware that talks to the internet and share stories of products that didn't pass muster.
theamphour.com/698-hardware-…
/dev/ttyS0 retweeted
Discovered internal Google files inside the sandbox.
Extracted a 579MB binary too big to just print out.
Used Binwalk to unpack it and found… source code.
linkedin.com/posts/kislayy_h…
/dev/ttyS0 retweeted
Just in time for a happy new year with better firmware analysis. Now with the enhanced binwalk decryptor available in EMBA. SBOM, known vulnerabilities, static analysis, emulation and much more (Screenshots from DIR-822 Rev C) github.com/e-m-b-a/emba
Just in time for Christmas: a repository for decrypting many encrypted D-Link firmware images. Also integrated into Binwalk for auto-magic decryption & extraction.
github.com/devttys0/delink
/dev/ttyS0 retweeted
EMBA release alert with version 1.5.1 - Rise from the dead or Binwalk is back in town.
We have a big update for all you #SBOM/#IoT/#firmware and binary analysis people out there.
EMBA is getting faster and more powerful with new binwalk v3 and more SBOM github.com/e-m-b-a/emba/rele…
/dev/ttyS0 retweeted
making progress ... say hi to all new binwalk in EMBA
Looks as it is time to start with some binwalk v3 integration into EMBA. First run is binwalk v2, 2nd run is v3 ... great work @devttyS0
/dev/ttyS0 retweeted
Finally got some real excuse to play with the new Rust rewrite of Binwalk (v3). It is absurdly faster in most tasks, to the point that I had to verify if my batch is really running and finishing tasks or just throwing mishandled errors.
/dev/ttyS0 retweeted
Can't wait to merge the new SBOM stuff into the EMBA master ... now with dependencies and much more included
/dev/ttyS0 retweeted
The Microsoft team found SOHO routers manufactured by TP-Link made up most of a covert network of compromised devices used for Storm-0940 hacking operations. They exploit a vulnerability in the routers to gain remote code execution capability for a botnet
microsoft.com/en-us/security…
/dev/ttyS0 retweeted
These updates are now merged into the master. So, for testing you only need to update your local github repo via "git pull" and then you can enjoy the #SBOM updates. Have phun and let us know what you are missing
EMBA is doing good in building the #SBOM for your binary blobs. I have now seen so many SBOMs from so many tools and the EMBA SBOM is getting quite pretty. Check it out and let us know what is missing - github.com/e-m-b-a/emba/pull…
/dev/ttyS0 retweeted
I presented about file formats identifiers at HackLu:
youtu.be/PBbld8xB2Bo
/dev/ttyS0 retweeted
I am @SAINTCON helping @herrmann1001 with rfid village.
/dev/ttyS0 retweeted
💥PoC is now public!
target = "https://{ip_address}/cgi/login.cgi"
command = "touch /tmp/BRLY"
libc = 0x76283000 # we try to guess
gadget1 = 0x000D8874 # pop {r0, r1, r2, r3, fp, pc};
gadget2 = 0x001026D4 # mov r0, sp; blx r3;
system = 0x0003C4D4
github.com/binarly-io/ToolsA…
🚨New! "CVE-2024-36435 Deep-Dive: The Year’s Most Critical BMC Security Flaw."
🔥Classic buffer overflow vulnerabilities resurface in BMCs, remotely opening the gates from the castle.
🏆Kudos to @AlexTereshkin for the initial discovery and disclosure!
binarly.io/blog/cve-2024-364…
/dev/ttyS0 retweeted
In case you missed this video. Please hack some cars.
m.youtube.com/watch?v=2eLQmk…
/dev/ttyS0 retweeted
You wanted it, you got it! IoT Firmware Exploitation ONLINE! 🙌 👏 🍻 😎
buff.ly/2YIxAxq #hacker #Exploit #IoT #embedded #firmware #CyberSecurity
/dev/ttyS0 retweeted
Want to learn how to exploit IoT devices? Don't want to fly to Maryland to do it? Our flagship course will now be offered online at a self paced video series and a kit we ship to you! Sign up today! tacnetsol.com/