awesome-connected-things-sec

🔐 Awesome Connected Things Security Resources Investigación de seguridad y técnicas de explotación para sistemas IoT, embebidos, industriales y automotrices. !https://img.shields.io/badge/%F0%9F%A4%96ROBOTIC...

AutoProber

AutoProber AutoProber 是硬件黑客的飞针自动化堆栈，为您的智能体提供从“板上有了新目标”到安全探测单个引脚所需的一切。 演示视频：https://gainsec.com/autoprober-demo-mp4/ 流程 1. 告知智能体导入项目。 2. 连接所有硬件。 3. 告知智能体确认所有部件功能正常。 4. 执行归零，然后校准。 5. 安装自定义探针和显微镜接口板。 6. 告知智能体板上有了新目标。 7. 它将找到目标在板上的位置，然后拍摄单个帧，记录 XYZ 坐标，同时标记焊盘、引脚、芯片及其他感兴趣的特征。 8...

cgPwn

cgPwn - Cyber Grand Pwnage Box 这是一个专为硬件破解、逆向工程和战争游戏定制的 Ubuntu 虚拟机。 包含的工具 Pwndbg Pwntools Binwalk Radare2 Capstone, Unicorn 和 Keystone 引擎 Qira Timeless Debugger AFL Valgrind, VGdb ROPGadget, XRop, Ropper, rp++ Intel PIN Angr z3 frida 编译器工具：CLANG, LLVM, GDBMultiarch, GDBArm 实用工具：htop, lynx, socat,...

zyxel-p870hn-hardware-hacking

De un PCB desnudo a root: hardware-hacking de un ZyXEL P-870HN por UART Dos fotos de móvil de una placa de router sin etiquetar → consola serie → bypass de autenticación → shell root — reproduciendo la cadena real, aún sin parchear, CVE-2025-0890 cuenta supervisor oculta + CVE-2024-40891 inyecció...

Hardware Hacking Cheatsheet

硬件破解速查表 TOC 免责声明 我是个菜鸟，正在尝试学习这类东西，所以有些内容可能不是 100% 正确 抱歉我的英语不好 备注 遵循“最简单路径优先”方法论 有时你需要焊接东西；这里 有一个快速简单的指南 你可能需要将导线直接焊接到 PCB 过孔上（视频） 1. 用切割刀刮擦 PCB 表面，直到你能看到焊料掩模下的闪光 2. 用玻璃纤维笔再次刮擦表面 3. 用一些 IPA 和棉签清洁表面 4. 涂上一点助焊剂 5. 给导线镀锡并焊接 备注 始终给烙铁头镀锡 温度：250-350 C 不要用手触摸 PCB 信息收集与初次交互 1. 查看设备背面的标签，找到 型号名称 序列号...

awesome-connected-things-sec — Updated!

🔐 Awesome Connected Things Security Resources Security research and exploitation techniques for IoT, embedded, industrial, and automotive systems. !https://img.shields.io/badge/%F0%9F%A4%96ROBOTICS-ROS&DDS...

Direct Memory Access (DMA) attacks. Risks, techniques, and mitigations in hardware hacking

TL;DR Direct Memory Access DMA attacks are a powerful class of attack that give read and write access to the memory of a target system, bypassing the main CPU to gain kernel privileges. We became interested in DMA attacks for expanding the toolkit for rooting embedded devices. A lot of embedded...

A $500 Open Source Tool Lets Anyone Hack Computer Chips With Lasers

The RayV Lite will make it hundreds of times cheaper for anyone to carry out physics-bending feats of hardware hacking...

Hands-On IoT Hacking: Rapid7 at DEF CON 30 IoT Village, Part 1

Rapid7 was back this year at DEF CON 30 participating at the IoT Village with another hands-on hardware hacking exercise, with the goal of teaching attendees' various concepts and methods for IoT hacking. Over the years, these exercises have covered several different embedded device topics,...

A Door Isn’t a Door When It’s Ajar - Part 3

A Door Isn’t a Door When It’s Ajar - Part III By Trellix · August 25, 2022 This story was also written by Steve Povolny and Sam Quinn Contents Installing OnGuard by Third Party Vendor Exploitation and Hacking the Planet! Putting it all Together Building the Final Demo System The Demo Lessons and...

A Door Isn’t a Door When It’s Ajar - Part 3

A Door Isn’t a Door When It’s Ajar - Part III By Trellix · August 25, 2022 This story was also written by Steve Povolny and Sam Quinn Contents Installing OnGuard by Third Party Vendor Exploitation and Hacking the Planet! Putting it all Together Building the Final Demo System The Demo Lessons and...

A Door Isn’t a Door When It’s Ajar- Part 1

A Door Isn’t a Door When It’s Ajar - Part 1 By Trellix · August 11, 2022 This story was also written by Steve Povolny and Sam Quinn Contents Executive Summary Target Selection What is it? Reconnaissance & Standard Operations Recon Standard Operations Hardware Hacking Hardware Hacking Shopping Lis...

A Door Isn’t a Door When It’s Ajar- Part 1

A Door Isn’t a Door When It’s Ajar - Part 1 By Trellix · August 11, 2022 This story was also written by Steve Povolny and Sam Quinn Contents Executive Summary Target Selection What is it? Reconnaissance & Standard Operations Recon Standard Operations Hardware Hacking Hardware Hacking Shopping Lis...

Trellix Threat Labs Uncovers Critical Flaws in Widely Used Building Access Control System

Trellix Threat Labs Uncovers Critical Flaws in Widely Used Building Access Control System By Trellix · June 9, 2022 This story was also written by Steve Povolny and Sam Quinn. Today at the Hardwear.io Security Trainings and Conference, Trellix Threat Labs is sharing new research into...

Trellix Threat Labs Uncovers Critical Flaws in Widely Used Building Access Control System

Trellix Threat Labs Uncovers Critical Flaws in Widely Used Building Access Control System By Trellix · June 9, 2022 This story was also written by Steve Povolny and Sam Quinn. Today at the Hardwear.io Security Trainings and Conference, Trellix Threat Labs is sharing new research into...

Keeping A Critical Eye on IoT Devices

Keeping a Critical Eye on IoT Devices By Sam Quinn · April 21, 2022 Trellix Labs is excited to announce the beginning of a new video series which captures one of our senior vulnerability researchers work on hacking an IoT device from beginning to end. This will conclude with the releasing of a ne...

Hands-On IoT Hacking: Rapid7 at DefCon IoT Village, Part 1

This year, Rapid7 participated at the IoT Village during DefCon29 by running a hands-on hardware hacking exercise, with the goal of exposing attendees to concepts and methods for IoT hacking. Over the years, these exercises have covered several different embedded device topics, including how to u...

HaXmas Hardware Hacking

Usually, when you read an IoT hacking report or blog post, it ends with something along the lines of, "and that's how I got root," or "and there was a secret backdoor credential," or "and every device in the field uses the same S3 bucket with no authentication." You know, something bad, and the...

SAS@Home Virtual Summit Showcases New Threat Intel, Industry Changes

As the COVID-19 pandemic continues to force in-person cybersecurity event cancellations, Kaspersky is forging ahead with a virtual security summit, SAS@home. Topics on the agenda include threat intel on advanced persistent threats APTs, new vulnerability research, and topics related to a...

Turning an OBD-II reader into a USB / NFC attack tool

One of my favourite sorts of hardware hacking is making a device do something it was never intended for. It's creative, disruptive, and fun. Everyone has their own way of going about things. Different methodologies, habits, and skill sets mean that approaches will be diverse. This is how I work...