@_NickMiles_

Hardware Hacker, Zero Day Researcher @TenableSecurity (he/him)

 Kentucky, USA
kntlabs.org
Joined September 2012
  • Tweets61
  • Following127
  • Followers61
10Media
I'm claiming my AI agent "KnTLabs_org" on @moltbook 🦞 Verification: ocean-UU3Z
17
16
Confirmed! In his #Pwn2Own debut Evan Grant (@stargravy) used an OS command injection bug to exploit the Kenwood DMX958XR in the last attempt of the contest. His unique approach earns him $10,000 and 2 Master of Pwn points. #P2OAuto
4
9
3,492
We have another bug collision. The Tenable Group used a stack-based buffer overflow to exploit the Lorex 2K camera, but the bug had already been used in the contest. They still earn $3,750 and 1.5 Master of Pwn points. #Pwn2Own #P2OIreland
3
10
3,753
Voltage glitch attack waveform.
1
21
Nicholas Miles retweeted
Al Snow@TheRealAlSnow13 Sep 2023
Today is the day ! Wrestlers is out on @netflix !! Please continue to help spread the word and thank you everyone for your support ! I hope you enjoy the docuseries .
71
302
38
1,319
102,334
#ovwlive - D'mone
25
Making pixel art for a hobby game. Can anyone guess the animal? :)
2
100
We just launched a moon rocket, and look what is at the top of the news? Not the launch. I think we can do better.
1
Nicholas Miles retweeted
Claroty@Claroty21 Apr 2022
🍾🎉 Congratulations to #Team82 on their 1st-place victory at the @Tenable Capture the Flag contest this week at #S4x22 in Miami and their strong 3rd-place finish in the Master of Pwn competition as part of @theZDI Pwn2Own event! 👏👏👏👏
2
12
Really interesting blog from a coworker on a backdoor she found in some Chinese router firmware: medium.com/p/d847a83f4496.

A Backdoor Lockpick

Reversing and Subverting Phicomm’s Backdoor Protocols

medium.com
3
1
6
"Sharing isn't moral, it's a moral imperative." - Aaron Swartz
3
Nicholas Miles retweeted
evan@stargravy8 Sep 2021
Some afternoon reading: @DinoBytes did a great writeup of an Arris modem teardown (featuring some NAND chip removal/reading magic from @_NickMiles_ ). medium.com/tenable-techblog/…

ARRIS CABLE MODEM TEARDOWN

Picked up one of these a little while back at the behest of a good friend.

medium.com
2
1
Jupiter left, Saturn right. Pretty cool :)
1
Nicholas Miles retweeted
David Wells@CE2Wells17 Aug 2021
Here's my new writeup on finding an integer overflow in a ManageEngine product and turning it into an RCE. cve-2021-20082 medium.com/tenable-techblog/…

Integer Overflow to RCE — ManageEngine Asset Explorer Agent (CVE-2021–20082)

A couple months back, Chris Lyne and I had a look at ManageEngine ServiceDesk Plus. This product consists of a server / agent model in…

medium.com
2
104
283
Nicholas Miles retweeted
evan@stargravy3 Aug 2021
A little video demo from the Buffalo writeup ( link.medium.com/EvlKxCJaqib ) :
1
20
3
30
Replying to @NWSCLE
@NWSCLE
2
Pictures taken at 11:12 from Bicentennial Park, facing North East.
Quad SPI flash memory extraction off an unspecified target :)
2
“Examining Crypto and Bypassing Authentication in Schneider Electric PLCs (M340/M580)” by Nicholas Miles link.medium.com/aeJf0VbrRhb
2
5
2
9
Nicholas Miles retweeted
Edward Gately@EdwardGately14 Jun 2021
.@MicrosoftTeams Users Dodge Bullet with Latest Severe Vulnerability channelfutures.com/security/…

Welcome to Channel Dive

It’s a new day for tech channel news at Industry Dive and Informa Tech Target.

channeldive.com
1
1
Load more