Owner thinkAwesome GmbH / I hack stuff ;) / „Blogger“ / #PwnAllTheClankers / https://xitter.cf/t.co/oS5tltd5V3

NRW, Germany
Joined May 2010
Here it is, the first public exploit of Humanoid Robots from @d0tslash and me: github.com/Bin4ry/UniPwn But this vulnerability is present in the whole new generation product line of @UnitreeRobotics . The vulnerability is even wormable, an attacker can not only take over the robot but also embed themselves on the devices and then infect the next devices in range.
9
43
12
158
42,808
Andreas retweeted
Niiiiiice! The redux variant is lit and includes @n0tsa !!
Nice, nice, nice one, thanks @Bin4ryDigit ! Those stickers are amazing!
2
1
14
390
Andreas retweeted
Nice, nice, nice one, thanks @Bin4ryDigit ! Those stickers are amazing!
1
1
1
6
1,323
Andreas retweeted
Time to defend my family honor today against an aggressor… got a few hours left. Trying to find strength for any words I’ll need to speak today. Highest priced lawyer in town vs little ole me for daring to speak up for my son. 🤷
Zero stress about tomorrow! 😅I have to go represent my son's voice vs the Zoo & their lawyers.. my first time getting sued, my first time defending myself, and my first time *in court* in my adult life. Wish me the best of probability, luck, & randomness! lnkd.in/p/eRKpgtJu
13
4
1
50
4,793
QQSpeed/QQ飞车 desktop one-click RCE. TTBOMK theres millions of concurrent users. Could publish 系统消息 (System Messages) in public/game chat chaining a sanitization bypass + unsafe PV canonicalization + a weird unrestricted Lua execution sink into arb cmd. Was paid out $515 🤷‍♂️
6
5
80
10,632
Andreas retweeted
Drone to GCS Vulns & Exploits github.com/nicholasaleks/inf…
4
8
379
Andreas retweeted
Hardware-based mitigation needs more time to deploy. For example, the @Starlink user terminal is the first non- smartphone IoT device that I've actually seen to have ARM PAC enabled (only in the kernel tho).
2
21
1,816
I am very grateful to @n0tsa! He send me this care package ❤️ thank you my friend
2
8
377
Andreas retweeted
Btw @n0tsa “spilled alllll of the tea”, including the candid exchange between @Bin4ryDigit @mammotiontech and I, plus my offer to step around them and talk to @AgilexRobotics staff if they kept dragging their feet… xitter.cf/n0tsa/status/209324248…
@n0tsa le boss comme d’habitude
3
1
562
Andreas retweeted
I couldn’t be more happy with having met @n0tsa and he allowing @Bin4ryDigit and I to train him in the fine art of “hoodrat stuff” 🤣 “it’s fun to do bad things” youtube.com/watch?v=qcqOgnQy…
we hack @d0tslash lawn mower without touching it. from a different country. live camera. joystick. blades on. then we mow his lawn Thread 🧵
2
3
534
We published our Mammotion security research. Unauthenticated admin takeover, ~337k users enumerable, fleet, wide device data leaks and account takeover that let an attacker drive someone else’s mower from the official app including camera. Writeup:
github.com/ClankerPwn/Mammot… Research by @n0tsa, @Bin4ryDigit, @d0tslash Mammotion l4wnm0w3r sometimes you have to mow someone else’s lawn.
2
9
14
1,019
Andreas retweeted
🔴 Des tondeuses robots piratables à distance : des chercheurs révèlent 14 failles chez Mammotion, avec environ 337 000 comptes potentiellement exposés dans 85 pays. La France figure parmi les pays comptant le plus d’utilisateurs concernés. frenchbreaches.com/blog/mamm…
7
48
3
88
7,820
Our latest research, again a lawnmower 😂
we hack @d0tslash lawn mower without touching it. from a different country. live camera. joystick. blades on. then we mow his lawn Thread 🧵
1
200
Andreas retweeted
we hack @d0tslash lawn mower without touching it. from a different country. live camera. joystick. blades on. then we mow his lawn Thread 🧵
1
2
2
8
3,084
Andreas retweeted
At least 2 more wormable chains are still there and I'm sure all of us in this thread know them🤪 Some people raise tens of billions of dollars through an IPO but still don't really respect security, that's why.
2
2
11
676
Cybersecurity firm VulnCheck just revealed that over 100,000 Chinese-made Zbtlink routers contain factory-installed backdoors capable of secretly hijacking network traffic. Named Darklantern and Speakingstone, these covert implants give remote operators unauthenticated root control over devices deployed worldwide. Jacob Baines, chief technology officer at VulnCheck, discovered the hidden code while analyzing firmware on a white-labeled router purchased right here in the United States. The compromised hardware, manufactured by Shenzhen Zhibotong Electronics, is rebranded and sold under dozens of common commercial labels across Amazon, Shopify, and Alibaba. One of the implants was caught silently harvesting credentials, executing remote commands, and redirecting web traffic. When Baines registered an unused server domain tied to the code, nearly 400 unique routers immediately checked in from across the globe. Zbtlink spokesperson Michael Xia claims these features are merely legitimate tools intended for authorized customer maintenance. However, security experts warn that shipping unencrypted, hardcoded surveillance capabilities into consumer hardware leaves every connected network completely vulnerable.
24
415
67
901
53,149
Andreas retweeted
A+ naming choice on the UniBLEed... 😍
1
2
153
Andreas retweeted
My boy @olivier_boschko just published the awesome and massive research on @UnitreeRobotics named #UniBLEed. He and friends showed a novel way to exploit the Unitree G1 via BLE! AGAIN a wormable BLE hack on a Unitree G1, the same class of exploits as @d0tslash and my #UniPwn which was the first exploit on a Humanoid, also via BLE and wormable. But this blog article and reserach goes much deeper, read it now! boschko.ca/g1-ble-rce/
1
9
1
13
2,375