Stealing Credit Cards from FUZE via Bluetooth (CVE-2018-9119) with exploit PoC and X-ray teardown blog.ice9.us/2018/04/stealin…

The optimal path to exploit development is: 1. Software engineering 2. Reverse engineering 3. Exploit development And each of these areas build on and improve the others. Being a software engineer part of an enormous monolithic project requires skills in reverse engineering to understand other people's code. Being a reverse engineer requires software development if you want to make tools to improve / automate your process. Being an exploit developer requires both to be able to locate a vulnerability and write a poc to take advantage of said vulnerability.

I’ve been saying this for years. Metric units are superior in every way except temperature and I will die on this hill.

That’s a wrap for Day 2 of #Pwn2Own Toronto 2023 – we’ve awarded a total of $801,250 so far this week! We’ll be back tomorrow with another full day of attempts. See the full schedule and today’s results at zerodayinitiative.com/blog Leaderboard as of today:

This is part of how LC3 (Bluetooth LE Audio’s codec) works

Going against the grain a bit with this one but the 707 is a true classic

.⁦@travisgoodspeed⁩ howdy neighbor! Look what I dug up while searching high and low for braid. Old enough to use mini USB, lovingly assembled back in the day by y/t. Still works! What vintage is this?

Reminds me of iodine reverse shells over DNS back in the naughty aughties CC/ @dyn___

I've been meaning to share this for a bit. Here is a wireshark/tshark dissector for the Apple BLE Advertising Beacon protocol known as "Continuity". It dissects all the data that your devices are sending out constantly. Happy Friday! github.com/netspooky/dissect…

Laser decapping PLCC "mass production" in collaboration with @mpeg4codec . Goal: decap 30-40 PLCCs to bare die for repackaging

We just released 2023.02 which unlocks 122.88MHz instantaneous bandwidth on the bladeRF 2.0 micro! Just a quick software upgrade to watch all of Bluetooth at once! nuand.com/2023-02-release-12…

Mountain View Reverse Engineering meetup this Wed 7:00 at Wagon Wheel BBQ meetup.com/mountain-view-rev…

This presentation by @mpeg4codec on building an SDR bluetooth sniffer is one of the best SDR talks I've seen. Awesome work! youtube.com/watch?v=lpM9rnMf…

The Ubertooth project has meant a great deal to Great Scott Gadgets, but it is time for us to retire this product. For more details about this decision please read our blog post: greatscottgadgets.com/2022/1…

A sad day indeed. RIP Ubertooth 2010-2022 🕯️we had so much fun on Caltrain greatscottgadgets.com/2022/1…

Ever wonder if your USB C cable is USB2 or USB3? Do you have some charge-only cables hiding in a box just waiting for the right moment to spoil your project plans?! Fear no more! I’ve made a simple board to test most of the things!

I get a couple dozen questions a year about laser decapping. So YES, I now can do laser decaps for both epoxy ("PDIP") and other chips like below. I'm working on tuning the process and will do a writeup once its more mature

Ghidra 10.2 is out! github.com/NationalSecurityA…

Anybody else have weekend plans

No more emails. If you want something from me you must approach me slowly and calmly with a piece of apple or carrot in your palm with your fingers flat and extended so I do not bite them