Skip to content

Index

  • 1 min read

SVGs for Jekyll

This website was created using jekyll. Today I wanted to figure out how to add drawings to jekyll posts, and it didn't prove very hard. All you have to do is add the html image tag to your post.

  • 1 min read

mitmproxy

I've found that sometimes "being good" at computer security is just about knowing the right tool for the right job, so occasionally I'll make a post like this one to evangelize tools I've found very helpful that I think will help others ho are growing their offensive security toolset.

  • 2 min read

Tar and Netcat

Having a copy of binaries from the target system is important in vulnerability research.

When investigating embedded systems, some factors can make this process more difficult:

  • the target system lacks typical programs used for copying files to remotes systems (eg. scp)
  • the target system is not physically accessible
  • the target system has very little storage
  • 1 min read

Plotly

Today I discovered plotly and having a lot of fun playing around with it. Definitely will be using it in the future to make some pretty graphs.

  • 4 min read

Firmware Exfiltration

I started learning about hardware hacking about a year ago. One topic I've found interesting is firmware extraction. I bought a router from Goodwill to practice ripping firmware off it, but found that there weren't a lot of videos online about how extracting firmware from start to finish. Additionally, I couldn't find any information about exfiltrating data over ethernet (which is about 1000x faster than over UART), so I made a video showing how to do it. Here it is, along with a outline for the entire process. Hope it helps!