Pentester, Hacker, Researcher, IT💻/HW🛠️/RF📡 Security Enthusiast! Find me on https://xitter.cf/t.co/90VEeG29Ox
Germany
Joined May 2019
- Tweets544
- Following297
- Followers759
- Likes1.7K
Pinned Tweet
Finally came around to make a Mastodon account: infosec.exchange/@iiiikarus 🎉🥳
Gerhard Klostermeier retweeted
The BalCCon2k26 - Dead Reckoning recordings are live! - media.lugons.org/BalCCon2k26… or youtube.com/@balccon-balkanc…
#balccon #balccon2k26 #hacking #community #novisad
Did you know that Ctrl+Win+Alt+Shift+L opens LinkedIn on Windows? Or that holding the right shift key for 12sec opens a popup from where you can access system settings?
Breaking out of kiosk systems can be super fun. Share your story or contribute to github.com/ikarus23/kiosk-mo…
Gerhard Klostermeier retweeted
Last weekend at #balccon2k26 I gave a talk about power analysis attacks. For the demo I designed and made an add-on board for Glasgow digital interface explorer. I plan to do a full writeup on it in the next few days
QNAP NAS have been analyzed and hacked many times in the past that finding a good vulnerability has become harder and harder. Still, @moritz_abrell was able to find a remote code execution #RCE. Congratulations! I'm amazed by the dedication! The blog post is a good read!
Check out our new blog post and PoC video demonstrating how a QNAP NAS can be compromised via non-control-data exploitation.
#CVE #Vulnerability #Exploit #QNAP #CyberSecurity
youtube.com/watch?v=_6Pwdss-…
Gerhard Klostermeier retweeted
🚀 RF Swift v3.0.0 "Resonance" is out.
Build a full hardware & RF security lab in seconds. From ham shack to Red Team/James Bond engagement: 200+ tools, one command, on the machine you already use.
Biggest release yet 🧵
Gerhard Klostermeier retweeted
The newly released open-source software tool named "TURNado" developed by my colleague @moritz_abrell is available on GitHub.
If you want to check TURN services of your interest for security issues, this TURN test suite may be for you.
github.com/SySS-Research/TUR…
Hacking a consumer home router? Nice exercise! Finding tons of flaws, even in the proprietary mesh technology? Really cool! Finding out you could pwn ~12000 of them easily over the Internet? 🫣😬
Really great research: blog.syss.com/posts/meshhack…
Nice! The talk about these findings from #SecurityFest 2026 is online: youtube.com/watch?v=2HZV-HFc…
Gerhard Klostermeier retweeted
Recent reports mention APTs abusing Microsoft TURN servers for C2 communication.
In our new blog post, we break down what’s actually going on, share practical guidance on how to assess TURN servers, and release a tool to perform such tests yourself:
blog.syss.com/posts/turnado/
Gerhard Klostermeier retweeted
Do you want to get into #VoltageGlitching and learn about side-channel attacks? Here is a way to get into that easily: fault-injection-library.read…
Gerhard Klostermeier retweeted
Today, the software tool wcfproxy developed by my colleague Sebastian Rauch was published as open source software. This tool is useful for intercepting/analyzing Net.TCP-based WCF network traffic.
You can find it in the SySS Research GitHub respository:
github.com/SySS-Research/wcf…
Gerhard Klostermeier retweeted
We probably shouldn’t be doing this.
This message may or may not have been intercepted. If you are reading this, you are already involved. Hackers, breakers, builders, and curious minds,this is your signal. cfp.balccon.org/balccon2k26-… #cfp #BalCCon2k26 #CyberSecurity #BalCCon
Gerhard Klostermeier retweeted
Hacking a Keyboard for Fun and Profit - Can It Run #Doom? blog.syss.com/posts/rog-azot…
Gerhard Klostermeier retweeted
Looks like STM32 RDP1 bypass is now a ~19€ product on Chinese marketplaces.
Solder chip on adapter -> plug USB dongle -> click button -> full flash dump. No glitching, no custom rig.
Wrote up the full evolution of STM32 readout protection attacks, from UV-C to CPU state tracing to… turnkey dongles.
🧵 community.penthertz.com/t/br…
cc @carlossless for the find and article
Hacking a home router. Boring?! What if I told you could hack thousands of them? Remotely! Over the Internet! Zero-click! And that's not all.
My colleague did some research and wrote it all up here: blog.syss.com/posts/meshhack…
Highly recommended!
#hacking #iot #embedded #security
Had been some time since I did some work on #MifareClassicTool. Finally released a new version. You can now increase values of Value Blocks which only have decrement/transfer/restore permissions.
github.com/ikarus23/MifareCl…
Gerhard Klostermeier retweeted
Another blog post about attacking the Trezor One #Bitcoin wallet with the #PicoGlitcher and #findus:
mkesenheimer.github.io/blog/…
This time, a fully locked down device is attacked via a double glitching attack.
Gerhard Klostermeier retweeted
You can find the recording of my No Hat 2025 talk titled "Your Security Update is not Secure Enough" here:
youtube.com/watch?v=WSJyZc9N…
Thanks again to the whole @nohatcon team for inviting me to Bergamo.
Again, really cool embedded systems hacking! I'm looking forward to the recording of the talk!
I'm back home from the beautiful city of Bergamo and the awesome @nohatcon.
Today, we have published the security advisories concerning the Verbatim security update I was talking about on Saturday in my presentation "Your Security Update is Not Secure Enough".
