Posts on firmware
7 posts on firmware. Notes from public sources and my own test lab.
Smart Homes or Digital Minefields? The Invisible Backdoors of the IoT World
Standard vulnerability scanners aren't enough for the world of ARM processors and unpatched BusyBox versions. Let's talk about why you need to dig into the hardware and firmware to truly secure IoT devices.
Smart Home, Dumb Holes: The Art of Becoming Root in the IoT World
IoT devices are often built for speed, not security. From default passwords to unencrypted MQTT traffic, let's explore why these 'smart' gadgets are a Red Teamer's favorite playground and how to lock them down.
From Streetlights to Server Rooms: The Mystery of the Letter 'S' in IoT Security
Think that smart sensor is harmless? Think again. From UART shells to hardcoded cloud keys, let's look at how IoT devices become the weakest link in your infrastructure.
The Dumb Security of Smart Homes: Why Are We Still Living in the 1990s in the IoT World?
Is Shodan really everything? In this piece, we dive into why the IoT ecosystem feels like the Wild West, exploring MQTT vulnerabilities and the 'geeky' reality of firmware analysis from a Red Teamer's perspective.
From Smart Bulbs to Corporate Networks: The 'Default' Disaster in IoT Security
Think that smart coffee machine in the breakroom is harmless? Think again. Let's dive into how 'default' settings and lazy engineering turn IoT devices into a Red Teamer's favorite entry point.
Smart Bulbs, Dumb Passwords: The IoT Backdoor Reality
A deep dive into why IoT devices remain the ultimate 'pivot points' for attackers and how a $20 smart plug can compromise an entire corporate network.
From Your Neighbor's Smart Bulb to the Corporate Network: The Backdoors of the IoT World
A deep dive into why everything labeled 'smart' is often a Trojan horse, and how we can secure the 'Internet of Troubles' based on real-world Red Teaming experience.