Curiosity in Practice
This weekend the infamous hacker and troll Weev decided it would be hilarious if he printed fascist flyers on open printers around the united states using this top secret APT string: cat payload.ps |netcat -q 0 ipadreess 9100 A lot of Colleges and Universities seem to have a problem with this. While I strongly disagree with the content that … Read more
My friend Scott pointed out the towels in most hotels now have RFID tags to help with inventory control: I also knew that my RSA Conference badge would have an RFID tag in it so it could be scanned on the expo floor: Since I never leave home without my Proxmark3 in my assault pack it was time to … Read more
The FBI has recently sued Apple to make them unlock the iphone of the San Bernardino Shooter (Here is Apple’s response.). The reason Apple needs help is because the phone has “Erase All Data After 10 Failed Passcode Attempts” turned on. Without that feature the government would have just built this robot to brute force the password … Read more
I have been meaning to pick up a Proxmark3 for the last couple of months to round out my RFID testing kit (while waiting for the chameleon mini to be released this summer). The problem is that most of the known suppliers are selling the Proxmark3 for around $420. I then found that Elechouse has their … Read more
Crashsafari.com is a website that overloads the browser with a self-generating text string which populates the address bar. After about 20 seconds or so it will force an iPhone to reboot, while significantly heating it up as the smartphone tries to handle the code of the site. The code of the website appears to generate an … Read more
I have been to Top Golf for 3 different events this year and was always amazed by their RFID technology and have always left wondering “What is in a Top Golf golfball?”. So when I saw a few “Top Golf” golf balls in the $1 ball bin at a golf store I bought them and … Read more
I have become more and more interested in hardware security lately and while I have been having a lot of fun learning about RFID Security I knew the next logical step would be to try to learn how to use a software-defined radio. After doing a lot of reading and research over the last couple of weeks … Read more
At the start of every month I pick a quote I like and hang it at my desk and try to use it to guide my thought process for the month and I thought I would share them here as I was cleaning off my desk for the year. Here are the quotes I used … Read more
From time to time I have the need to test or verify a web application vulnerability through the TOR network using BurpSuite. The easiest way to do this to use the pre-bundled TOR Browser. Configuration is fairly easy: Download, Install and Start the TOR Browser: Verify that the SOCKS proxy is started on 127.0.0.1:9150 Configure Burp (Options > … Read more
Last month I got a new iPhone. This month I realized I forgot my Xbox One password when I tried to log in to download some Games With Gold. I didnt think this would be a problem. I forget and rest passwords all the time. So I go through the normal steps and have it send me … Read more