Notes, write-ups and reports — including CVEs and security research.
what am I looking at? Just like the rest of the internet, I am curiously looking at what is going on, but unlike the drama around the M1, I personally think the blame is on macOS and not the M1.But…
This is just a short one, because everything else is everywhere else. So here is the story, I do a lot of travelling, not a huge amount, but enough. About once a week I do 650km in a day, and I hav…
This is a continuation of my X6 Project Reversing the X6 Key Cutting Machine Making my first keys with the X6 (Silca LF37) In order to better understand the file structure, I will break it into blo…
Let’s try to make my first key, from what we know. Silca LF37 – Lock Focus – S0001-S1000 Series AND T0001-T1000 Series This is a followup to Reversing the X6 Key Cutting Machine And we will guess t…
So this lovely little machine, made in China, without any real documentation, is pack full of Key Profiles for all sorts of cars…. Cars… Nothing else. Except I want to cut keys for almost everythin…
Mr Robot Find the machine here on Vulnhub https://www.vulnhub.com/entry/mr-robot-1,151/ Warning If you haven’t finished getting all three Flags, don’t go any further. Do not ruin it for youself!! B…
Introduction Thermofisher dataTaker DT8x devices offer little security, and clear text configuration visible to users without any log in process. The products website: http://www.datataker.com/ Vul…
Introduction After discovering the Exposures identified here I decided to try to inject a new user into the system by modifying packets in the TCP Stream Disclosure Timeline 2017-02-24: Vulnerabili…
Introduction Responsible Disclosure Timeline. 2016-10-10: Sent to both the Australian Importer and Dahua, everything mentioned here plus more. The Importer was also called to discuss the issues. 20…
