I decided to have a play with some side channel analysis attacks, What seemed like the easiest to attempt is a timing attack, so here is my findings. All the code for this is available at https://rossmarks.uk/git/0xRoM/Hardware in the “/SideChannel/ATtiny85_Timing_Attack” … Continue reading
I recently stumbled across these cute little boards on amazon and HAD to get some, without a project in mind. I quickly decided these would make an awesome little hardware backdoor/implant, and it just so happens I have a little … Continue reading
AI is a hot topic at the moment and I wanted an excuse to play with it and learn how to use OpenAI’s API. It is likely that email companies will be using AI to determine email legitimacy, and I … Continue reading
For this post we will be playing with the following: Once it arrived the first thing to do was to download the app (playstore link) connect the device, lock and unlock it a few times. It was fairly trivial and … Continue reading
I wanted to give a quick demo on how to reverse engineer an ATtiny85 micro-controller to read the code stored on the device. For this demo the “hello world” is a small circuit with four buttons. By typing in the … Continue reading
Play guide To start a new game the dial should be turned clockwise.The LED under the dial will get brighter the closer you are to the goal.Once you are in the goal segment turn the dial in the opposite direction.The … Continue reading
If you haven’t read Part 1 I’d recommend doing so, just to know the current state of play. But to recap, everything runs as root, it’s easy to brute force and serial is easy to identify and access dropping to … Continue reading
I would like to preface this by stating that I have no idea what I am doing, I am just playing and messing around and you probably shouldn’t take my word as gospel! That being said, I feel like I’ve … Continue reading
So a pentest friend came over that I hadn't seen in a while, and as always we had an evening of nerding out, one of the many takeaways from this was he gave me a small device and a link … Continue reading
I’ve recently discovered todo.txt. For anyone already with a todo.txt on their desktop it’s a fairly simple concept. Just a set of standards and ways of writing your todo.txt file to make it easier to read, use and compatible with … Continue reading
OK one last Vulnhub VM for today, this time is the second in the series: Resimler: BTRSys v2.1, This one is a bit more difficult than the previous, but only marginally. Getting this VM up and running is a pain, first … Continue reading
Wow two in one day! It must be a record… or the fact I am ill, either way here’s another write-up. This time I will be doing Resimler: BTRSys v1, It’s a fairly straight forward Boot2Root and for people familiar to these … Continue reading
Back once again with another vulnhub writeup, you guys seem to like these and a load of new VM’s were added that currently don’t have any. As you can tell by the title this one is for “LazySysAdmin: 1” My … Continue reading
So a friend of mine is working on a CAPTCHA solving program. I can't go into the details here as it's not my work therefore it's not up to me to disclose. This did peak my interest slightly as I … Continue reading