Pinned Tweet
Stealing Credit Cards from FUZE via Bluetooth (CVE-2018-9119) with exploit PoC and X-ray teardown blog.ice9.us/2018/04/stealin…
Mike Ryan retweeted
The optimal path to exploit development is:
1. Software engineering
2. Reverse engineering
3. Exploit development
And each of these areas build on and improve the others.
Being a software engineer part of an enormous monolithic project requires skills in reverse engineering to understand other people's code.
Being a reverse engineer requires software development if you want to make tools to improve / automate your process.
Being an exploit developer requires both to be able to locate a vulnerability and write a poc to take advantage of said vulnerability.
I’ve been saying this for years. Metric units are superior in every way except temperature and I will die on this hill.
This quoted post is unavailable.
Mike Ryan retweeted
That’s a wrap for Day 2 of #Pwn2Own Toronto 2023 – we’ve awarded a total of $801,250 so far this week! We’ll be back tomorrow with another full day of attempts. See the full schedule and today’s results at zerodayinitiative.com/blog
Leaderboard as of today:
.@travisgoodspeed howdy neighbor! Look what I dug up while searching high and low for braid. Old enough to use mini USB, lovingly assembled back in the day by y/t. Still works! What vintage is this?
Reminds me of iodine reverse shells over DNS back in the naughty aughties CC/ @dyn___
Mike Ryan retweeted
I've been meaning to share this for a bit. Here is a wireshark/tshark dissector for the Apple BLE Advertising Beacon protocol known as "Continuity". It dissects all the data that your devices are sending out constantly. Happy Friday!
github.com/netspooky/dissect…
ALT Wireshark screenshot showing airpods status
Mike Ryan retweeted
Laser decapping PLCC "mass production" in collaboration with @mpeg4codec . Goal: decap 30-40 PLCCs to bare die for repackaging
Mike Ryan retweeted
We just released 2023.02 which unlocks 122.88MHz instantaneous bandwidth on the bladeRF 2.0 micro! Just a quick software upgrade to watch all of Bluetooth at once! nuand.com/2023-02-release-12…
Mike Ryan retweeted
Mountain View Reverse Engineering meetup this Wed 7:00 at Wagon Wheel BBQ
meetup.com/mountain-view-rev…
Mike Ryan retweeted
This presentation by @mpeg4codec on building an SDR bluetooth sniffer is one of the best SDR talks I've seen. Awesome work!
youtube.com/watch?v=lpM9rnMf…
Mike Ryan retweeted
The Ubertooth project has meant a great deal to Great Scott Gadgets, but it is time for us to retire this product. For more details about this decision please read our blog post: greatscottgadgets.com/2022/1…
A sad day indeed. RIP Ubertooth 2010-2022 🕯️we had so much fun on Caltrain greatscottgadgets.com/2022/1…
Mike Ryan retweeted
Ever wonder if your USB C cable is USB2 or USB3? Do you have some charge-only cables hiding in a box just waiting for the right moment to spoil your project plans?!
Fear no more!
I’ve made a simple board to test most of the things!
Mike Ryan retweeted
I get a couple dozen questions a year about laser decapping. So YES, I now can do laser decaps for both epoxy ("PDIP") and other chips like below. I'm working on tuning the process and will do a writeup once its more mature
