Skip to main content
Hardware Router CTF
  • Hardware Hacking
Hardware Router CTF

14 Min Read

Mar 10, 2020
Fill your Boots with credential stuffing protections
  • Passwords
Fill your Boots with credential stuffing protections

5 Min Read

Mar 06, 2020
A not so Clearview?
  • Vulnerabilities and Disclosures
A not so Clearview?

3 Min Read

Mar 04, 2020
From Minecraft to Metasploit. Game hacking could start your cyber security career
  • How Tos
From Minecraft to Metasploit. Game hacking could start your cyber security career

5 Min Read

Mar 03, 2020
Hardcoding Keys. Is that Wyse?
  • Reverse Engineering
Hardcoding Keys. Is that Wyse?

3 Min Read

Feb 25, 2020
Ships can’t be hacked. Wrong
  • Maritime Cyber Security
Ships can’t be hacked. Wrong

10 Min Read

Feb 20, 2020
Out Of Band, Out Of Sight, Out Of Mind
  • Maritime Cyber Security
Out Of Band, Out Of Sight, Out Of Mind

4 Min Read

Feb 17, 2020
Business Email Compromise. What to do
  • How Tos
Business Email Compromise. What to do

6 Min Read

Feb 14, 2020
Reverse Engineering the Tesla Firmware Update Process
  • Automotive Security
  • Hardware Hacking
  • Reverse Engineering
Reverse Engineering the Tesla Firmware Update Process

44 Min Read

Feb 12, 2020
Reverse Engineering Tesla Hardware
  • Automotive Security
Reverse Engineering Tesla Hardware

16 Min Read

Feb 12, 2020
Password managers for all staff. Why the resistance?!
  • Passwords
Password managers for all staff. Why the resistance?!

6 Min Read

Feb 10, 2020
2×4 Security
  • GRC Consultancy Advice
  • Social Engineering
2×4 Security

3 Min Read

Feb 07, 2020
Pen Testing Ships. A year in review
  • Maritime Cyber Security
Pen Testing Ships. A year in review

9 Min Read

Feb 04, 2020
HTTP Request Smuggling. A how-to
  • How Tos
HTTP Request Smuggling. A how-to

7 Min Read

Jan 31, 2020
ASSURE Aviation Cyber Security Testing
  • Aviation Cyber Security
ASSURE Aviation Cyber Security Testing

7 Min Read

Jan 30, 2020
  • Internet Of Things
Embedded devices. Typical security issues

3 Min Read

Jan 26, 2020
IR & Forensics in the Cloud
  • Digital Forensics and Incident Response
IR & Forensics in the Cloud

4 Min Read

Jan 10, 2020
Quick Wins to Combat Data Leaks
  • How Tos
Quick Wins to Combat Data Leaks

3 Min Read

Jan 08, 2020
Kids Tracker Watches: CloudPets, exploiting athletes and hijacking reality TV
  • Internet Of Things
Kids Tracker Watches: CloudPets, exploiting athletes and hijacking reality TV

11 Min Read

Dec 17, 2019
Xmas Light Security Improves… a bit
  • Internet Of Things
Xmas Light Security Improves… a bit

3 Min Read

Dec 10, 2019
Hacking Hardware Password Managers: The RecZone
  • Hardware Hacking
Hacking Hardware Password Managers: The RecZone

11 Min Read

Dec 06, 2019
Hacking Hardware Password Managers: passwordsFAST
  • Hardware Hacking
Hacking Hardware Password Managers: passwordsFAST

8 Min Read

Dec 06, 2019
Hacking Hardware Password Managers: Royal Vault Password Keeper
  • Hardware Hacking
Hacking Hardware Password Managers: Royal Vault Password Keeper

9 Min Read

Dec 06, 2019
Nuclear Satcoms
  • OT, ICS, IIoT, SCADA
Nuclear Satcoms

4 Min Read

Dec 04, 2019
Commands and Tools for Embedded Reverse Engineering
  • How Tos
  • Reverse Engineering
Commands and Tools for Embedded Reverse Engineering

8 Min Read

Dec 03, 2019
Analysing the Attack Surface of an Industrial Data Acquisition Device
  • OT, ICS, IIoT, SCADA
Analysing the Attack Surface of an Industrial Data Acquisition Device

7 Min Read

Dec 03, 2019
The snooping girl on a train, again. How to compromise a business
  • How Tos
The snooping girl on a train, again. How to compromise a business

3 Min Read

Dec 02, 2019
Embedded device research. The tools you’ll need
  • Hardware Hacking
Embedded device research. The tools you’ll need

7 Min Read

Nov 29, 2019
Ships engines, a guide for pen testers
  • Maritime Cyber Security
Ships engines, a guide for pen testers

7 Min Read

Nov 29, 2019
Christmas socialising. Goodwill to all, and keep your devices safe
  • How Tos
Christmas socialising. Goodwill to all, and keep your devices safe

3 Min Read

Nov 28, 2019
The Disgruntled Employee?
  • Digital Forensics and Incident Response
The Disgruntled Employee?

4 Min Read

Nov 15, 2019
Updating Airplanes
  • Aviation Cyber Security
Updating Airplanes

2 Min Read

Nov 11, 2019
Schiphol hijack false alarm. An insiders view of what happened
  • Aviation Cyber Security
Schiphol hijack false alarm. An insiders view of what happened

4 Min Read

Nov 07, 2019
Pwning a Smart Car Charger, Building a Botnet
  • Internet Of Things
Pwning a Smart Car Charger, Building a Botnet

7 Min Read

Nov 06, 2019
Objections to IoT regulation. A rational reply
  • Internet Of Things
Objections to IoT regulation. A rational reply

3 Min Read

Oct 24, 2019
Unmasking mystery boxes on ship’s bridges
  • Maritime Cyber Security
Unmasking mystery boxes on ship’s bridges

9 Min Read

Oct 14, 2019
Mapping the Attack Surface of an Airport
  • Aviation Cyber Security
Mapping the Attack Surface of an Airport

12 Min Read

Oct 11, 2019
Help, my accounts have been hacked! What should I do?
  • Consumer Advice
Help, my accounts have been hacked! What should I do?

10 Min Read

Oct 10, 2019
Too Interested?
  • Digital Forensics and Incident Response
Too Interested?

3 Min Read

Oct 08, 2019
Real-life social engineering. Another two days in tweets
  • Social Engineering
Real-life social engineering. Another two days in tweets

11 Min Read

Oct 04, 2019
OSINT for Avionics
  • Aviation Cyber Security
OSINT for Avionics

6 Min Read

Oct 04, 2019
The 5 breach readiness mistakes
  • Digital Forensics and Incident Response
The 5 breach readiness mistakes

4 Min Read

Sep 30, 2019
  • Opinions
My environmental journey

5 Min Read

Sep 28, 2019
A security researcher has made contact. What do I do?
  • How Tos
A security researcher has made contact. What do I do?

11 Min Read

Sep 27, 2019
Think you’ve had a breach? Top 5 things to do
  • Digital Forensics and Incident Response
Think you’ve had a breach? Top 5 things to do

6 Min Read

Sep 23, 2019
Drilling open a smart door lock in 4 seconds
  • Internet Of Things
Drilling open a smart door lock in 4 seconds

4 Min Read

Sep 23, 2019
A Pen Tester’s First Solo: Aviation Security 101
  • Aviation Cyber Security
A Pen Tester’s First Solo: Aviation Security 101

16 Min Read

Sep 20, 2019
How to: Kerberoast like a boss
  • Red Teaming
How to: Kerberoast like a boss

12 Min Read

Sep 18, 2019
  • Internet Of Things
IoT security. A retrospective

5 Min Read

Sep 17, 2019
Real-life social engineering. Two days in tweets
  • Red Teaming
Real-life social engineering. Two days in tweets

12 Min Read

Sep 16, 2019
Pwning a Siemens Scalance ICS switch through ARM reversing
  • OT, ICS, IIoT, SCADA
Pwning a Siemens Scalance ICS switch through ARM reversing

7 Min Read

Sep 03, 2019
A Secure “Smart” Kettle?
  • Internet Of Things
A Secure “Smart” Kettle?

3 Min Read

Aug 30, 2019
PrivEsc in Lenovo Solution Centre, 10 minutes later
  • Vulnerabilities and Disclosures
PrivEsc in Lenovo Solution Centre, 10 minutes later

4 Min Read

Aug 22, 2019
Lojack’d: Pwning Smart vehicle trackers
  • Automotive Security
Lojack’d: Pwning Smart vehicle trackers

9 Min Read

Aug 14, 2019
Dating apps that track users from home to work and everywhere in-between
  • Vulnerabilities and Disclosures
Dating apps that track users from home to work and everywhere in-between

6 Min Read

Aug 11, 2019
Reverse Engineering 4G Hotspots for fun, bugs and net financial loss
  • Hardware Hacking
Reverse Engineering 4G Hotspots for fun, bugs and net financial loss

7 Min Read

Aug 10, 2019
Breaking (Bad) Cross-Site Request Forgery Protection – The Netgear Nighthawk M1
  • Hardware Hacking
Breaking (Bad) Cross-Site Request Forgery Protection – The Netgear Nighthawk M1

5 Min Read

Aug 10, 2019
CVE-2019-12103 – Analysis of a Pre-Auth RCE on the TP-Link M7350, with Ghidra!
  • Hardware Hacking
  • Vulnerabilities and Disclosures
CVE-2019-12103 – Analysis of a Pre-Auth RCE on the TP-Link M7350, with Ghidra!

18 Min Read

Aug 10, 2019
Breaking (bad) firmware encryption. Case study on the Netgear Nighthawk M1
  • Hardware Hacking
  • How Tos
  • Reverse Engineering
Breaking (bad) firmware encryption. Case study on the Netgear Nighthawk M1

16 Min Read

Aug 10, 2019
ZTE MF910 – An end of life router, running lots of vivacious hidden code
  • Internet Of Things
ZTE MF910 – An end of life router, running lots of vivacious hidden code

8 Min Read

Aug 10, 2019
Group sex app leaks locations, pics and personal details. Identifies users in White House and Supreme Court
  • Internet Of Things
Group sex app leaks locations, pics and personal details. Identifies users in White House and Supreme Court

5 Min Read

Aug 08, 2019
PTP at DEF CON 27
  • Shameless Self Promotion
PTP at DEF CON 27

2 Min Read

Aug 05, 2019
DCMS Practical Guidelines. Actionable information
  • Cyber Regulation
  • Internet Of Things
DCMS Practical Guidelines. Actionable information

11 Min Read

Aug 02, 2019
Vehicle Telematics Security; getting it right
  • Automotive Security
  • Internet Of Things
Vehicle Telematics Security; getting it right

9 Min Read

Jul 26, 2019
Social engineering. When you’re the mark…
  • Social Engineering
Social engineering. When you’re the mark…

9 Min Read

Jul 23, 2019
Fails and Fixes with IoT
  • Internet Of Things
Fails and Fixes with IoT

8 Min Read

Jul 19, 2019
Burning down the house with IoT
  • Internet Of Things
Burning down the house with IoT

6 Min Read

Jul 12, 2019
Getting your head under the hood and out of the sand: Automotive security testing
  • Automotive Security
Getting your head under the hood and out of the sand: Automotive security testing

12 Min Read

Jul 05, 2019
Slok API
  • Vulnerabilities and Disclosures
Slok API

7 Min Read

Jul 03, 2019
The null choice. A social engineering example in the wild
  • Social Engineering
The null choice. A social engineering example in the wild

7 Min Read

Jul 02, 2019
Ninja Turtles in your network: LAN Turtle 3G. A how-to for red teaming
  • Red Teaming
Ninja Turtles in your network: LAN Turtle 3G. A how-to for red teaming

11 Min Read

Jul 01, 2019
  • Vulnerabilities and Disclosures
Don’t ‘Roley’ your own encryption, says Bob the Builder

5 Min Read

Jun 28, 2019
The not so ultra lock
  • Vulnerabilities and Disclosures
The not so ultra lock

6 Min Read

Jun 27, 2019
F5 Networks Endpoint Inspector – Browser-to-RCE?
  • Vulnerabilities and Disclosures
F5 Networks Endpoint Inspector – Browser-to-RCE?

5 Min Read

Jun 26, 2019
Double-Free RCE in VLC. A honggfuzz how-to
  • Vulnerabilities and Disclosures
Double-Free RCE in VLC. A honggfuzz how-to

26 Min Read

Jun 21, 2019
Why we shouldn’t use sequential booking references
  • Opinions
Why we shouldn’t use sequential booking references

3 Min Read

Jun 19, 2019
Ewon Flexy IoT Router. A Deep dive
  • OT, ICS, IIoT, SCADA
  • Vulnerabilities and Disclosures
Ewon Flexy IoT Router. A Deep dive

26 Min Read

Jun 18, 2019
Sharing the Secrets: Pwning an industrial IoT router
  • OT, ICS, IIoT, SCADA
Sharing the Secrets: Pwning an industrial IoT router

5 Min Read

Jun 18, 2019
Covert Keylogging: Sniping your Typing
  • How Tos
Covert Keylogging: Sniping your Typing

12 Min Read

Jun 13, 2019
Bloodhound walkthrough. A Tool for Many Tradecrafts
  • Red Teaming
Bloodhound walkthrough. A Tool for Many Tradecrafts

19 Min Read

Jun 07, 2019
Don’t get burnt on pay day. How to buy IoT gadgets sensibly
  • Consumer Advice
Don’t get burnt on pay day. How to buy IoT gadgets sensibly

6 Min Read

May 31, 2019
Securing your red team kit with Uncomplicated Firewall
  • Red Teaming
Securing your red team kit with Uncomplicated Firewall

17 Min Read

May 29, 2019
Pwning the Nokelock API
  • Vulnerabilities and Disclosures
Pwning the Nokelock API

7 Min Read

May 24, 2019
Tesla Killer: The Fuzzed and the Furious
  • Automotive Security
Tesla Killer: The Fuzzed and the Furious

2 Min Read

May 16, 2019
FUD 101: How not to report healthcare cybersecurity issues
  • Medical Device Security
FUD 101: How not to report healthcare cybersecurity issues

3 Min Read

May 15, 2019
eyeDisk. Hacking the unhackable. Again
  • Vulnerabilities and Disclosures
eyeDisk. Hacking the unhackable. Again

12 Min Read

May 09, 2019
Pwning WordPress GraphQL
  • Vulnerabilities and Disclosures
Pwning WordPress GraphQL

4 Min Read

May 08, 2019
How To Do Firmware Analysis. Tools, Tips, and Tricks
  • How Tos
How To Do Firmware Analysis. Tools, Tips, and Tricks

27 Min Read

May 03, 2019
UK Government gets serious about consumer IoT security. Legislation on the way
  • Consumer Advice
UK Government gets serious about consumer IoT security. Legislation on the way

2 Min Read

May 01, 2019
Tic Toc Pwned
  • Internet Of Things
Tic Toc Pwned

9 Min Read

Apr 15, 2019
Cobalt Strike. Walkthrough for Red Teamers
  • Red Teaming
Cobalt Strike. Walkthrough for Red Teamers

22 Min Read

Apr 15, 2019
Hacking Superyachts. Advice for integrators
  • Maritime Cyber Security
Hacking Superyachts. Advice for integrators

5 Min Read

Apr 01, 2019
Hacking Superyachts. Advice for captains
  • Maritime Cyber Security
Hacking Superyachts. Advice for captains

6 Min Read

Apr 01, 2019
Hacking Superyachts. Advice for owners
  • Maritime Cyber Security
Hacking Superyachts. Advice for owners

4 Min Read

Apr 01, 2019
Business banking fraud. Keep your eggs in TWO baskets. Here’s why…
  • Opinions
Business banking fraud. Keep your eggs in TWO baskets. Here’s why…

3 Min Read

Mar 26, 2019
Remote command injection through an endpoint security product
  • Vulnerabilities and Disclosures
Remote command injection through an endpoint security product

6 Min Read

Mar 21, 2019
Connected camera cock up
  • Internet Of Things
Connected camera cock up

4 Min Read

Mar 20, 2019
Walkthrough. Investigating an SSD
  • How Tos
Walkthrough. Investigating an SSD

4 Min Read

Mar 15, 2019
Gone in six seconds? Exploiting car alarms
  • Automotive Security
Gone in six seconds? Exploiting car alarms

10 Min Read

Mar 08, 2019
Hacking ski helmet audio
  • Internet Of Things
Hacking ski helmet audio

3 Min Read

Mar 04, 2019
1 … 3 4 5 6 7 … 10