OK so this will be a short one, but a nerdy one! I’m currently creating a load of systems and using a SSO (Single Sign On) solution. So I can make a load of services, webapps and servers, but the … Continue reading
Category Archives: Tutorial
SSH PAM SSO LDAP
Reply
Side Channel Timing Attack
I decided to have a play with some side channel analysis attacks, What seemed like the easiest to attempt is a timing attack, so here is my findings. All the code for this is available at https://rossmarks.uk/git/0xRoM/Hardware in the “/SideChannel/ATtiny85_Timing_Attack” … Continue reading
GL iNet 300M Fun (Pt.3)
I recently stumbled across these cute little boards on amazon and HAD to get some, without a project in mind. I quickly decided these would make an awesome little hardware backdoor/implant, and it just so happens I have a little … Continue reading
AI Mail Tester
AI is a hot topic at the moment and I wanted an excuse to play with it and learn how to use OpenAI’s API. It is likely that email companies will be using AI to determine email legitimacy, and I … Continue reading
Breaking a smart lock
For this post we will be playing with the following: Once it arrived the first thing to do was to download the app (playstore link) connect the device, lock and unlock it a few times. It was fairly trivial and … Continue reading
Reversing an ATtiny85
I wanted to give a quick demo on how to reverse engineer an ATtiny85 micro-controller to read the code stored on the device. For this demo the “hello world” is a small circuit with four buttons. By typing in the … Continue reading
SafeCrack play and build guide
Play guide To start a new game the dial should be turned clockwise.The LED under the dial will get brighter the closer you are to the goal.Once you are in the goal segment turn the dial in the opposite direction.The … Continue reading
GL iNet 300M Fun (Pt.2)
If you haven’t read Part 1 I’d recommend doing so, just to know the current state of play. But to recap, everything runs as root, it’s easy to brute force and serial is easy to identify and access dropping to … Continue reading
GL iNet 300M Fun (Pt.1)
I would like to preface this by stating that I have no idea what I am doing, I am just playing and messing around and you probably shouldn’t take my word as gospel! That being said, I feel like I’ve … Continue reading
BLE CTF Walkthrough
So a pentest friend came over that I hadn't seen in a while, and as always we had an evening of nerding out, one of the many takeaways from this was he gave me a small device and a link … Continue reading
moodlog.txt
I’ve recently discovered todo.txt. For anyone already with a todo.txt on their desktop it’s a fairly simple concept. Just a set of standards and ways of writing your todo.txt file to make it easier to read, use and compatible with … Continue reading
Vulnhub: Resimler: BTRSys v2.1
OK one last Vulnhub VM for today, this time is the second in the series: Resimler: BTRSys v2.1, This one is a bit more difficult than the previous, but only marginally. Getting this VM up and running is a pain, first … Continue reading
Vulnhub: Resimler: BTRSys v1
Wow two in one day! It must be a record… or the fact I am ill, either way here’s another write-up. This time I will be doing Resimler: BTRSys v1, It’s a fairly straight forward Boot2Root and for people familiar to these … Continue reading
Vulnhub: LazySysAdmin: 1
Back once again with another vulnhub writeup, you guys seem to like these and a load of new VM’s were added that currently don’t have any. As you can tell by the title this one is for “LazySysAdmin: 1” My … Continue reading