Xiaomi-C200-Firmware-Analysis

El Alcance En este repositorio mostraré cómo obtuve acceso a la interfaz UART incluso sin el conjunto común de pines expuestos / pads de prueba, utilizando U-Boot y trucos para obtener root en una etapa temprana y eventualmente extraer el firmware. Reconocimiento Inicial Hay algunas cosas clave q...

ShiningAppMask-ReverseEngineering

ShiningAppMask-IngenieríaInversa Introducción Después de comprar recientemente una Shining App Mask, sentí curiosidad por la aplicación Shining Mask y la máscara y cómo funcionaban. Decidí aplicar ingeniería inversa para entender cómo funcionaba. El viaje comenzó con el hardware. La aplicación...

chipsec v2.0.7

CHIPSEC: Platform Security Assessment Framework CHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware BIOS/UEFI, and platform components. It includes a security test suite, tools for accessing various low level interfaces, and forensic capabilities...

CosmicStrand: the discovery of a sophisticated UEFI firmware rootkit

Introduction Rootkits are malware implants which burrow themselves in the deepest corners of the operating system. Although on paper they may seem attractive to attackers, creating them poses significant technical challenges and the slightest programming error has the potential to completely cras...

Reverse Engineering Tesla Hardware

TL;DR How does the Tesla Model S update its firmware? What did we find when reverse engineering the display and instrument cluster? Here’s the result of a couple of weeks work, working on a real vehicle that mostly worked after we had finished. Part 1: analysing the hardware, complete with a 14...

What’s in the Box?

ARCHIVED STORY What’s in the Box? By Sam Quinn · February 25, 2019 2018 was another record-setting year in the continuing trend for consumer online shopping. With an increase in technology and efficiency, and a decrease in cost and shipping time, consumers have clearly made a statement that...