Author: Marek Šanta

Až sa za to hanbím, ale “hračku” Flipper Zero mi pred pár rokmi ukázal až kolega – úplne ma obišiel viac ako rok jej existencie. Rozhodnutie objednať si ho mi trvalo presne minútu a od kedy som si ho kúpil, nosím ho stále pri sebe ako vejperi svoje vejpy. Pre každého etického hackera to bolo vykúpenie, pretože na veľa akcií ste už nepotrebovali malý batoh s Proxmarkom a množstvom čipov, HackRF, minipočítačom, staršim telefónom s IR blastrom, atď. Zrazu ste mali všetko vo vrecku – v nenápadnom a odolnom balení, ktoré môžete ostentatívne vyložiť pri letiskovej kontrole vedľa hodiniek a nikto ani brvou nepohne. Okrem zákazu v Brazílii a náznaku zákazu v Kanade sú s Flipperom všetci akosi v pohode.

To sa však môže veľmi rýchlo zmeniť. Potenciál, ktorý táto hračka má sa očividne začína využívať naplno.

Continue reading “Uniknutý firmvér z Ruska – Zakážu nám Flippera?”

In Czechia, any unauthorized access to anything that can be defined as a “computer system” is a criminal offense. You can go to jail for that even if your access was totally unintentional. Yes, there are some crazy guys who do not care at all but I try to be clean for various reasons.

Continue reading “Alcohol-free Gasoline”

At the university, we did go through physical hardware attacks, like USB keyloggers or getting data from frozen memory sticks and cryptographic keys from smartcards. But as I am finishing my master’s in cybersecurity management, I realized that something has been missing – the actual means of “getting physical.”

Continue reading “The physical hack I have always wanted to try”

This video was recorded for the sole purpose of having some reference in my bachelor thesis that such an attack can be done. It is one of many strikingly apparent physical attacks for which I could not find any example online. On the other hand, more popular PIR REXes have tons of videos.

Continue reading “Triggering microwave REX”

I made my first (not indicating that there were any others!) crime in 2009 when I was 14 years old. Well, the criminality of phishing was controversial at the time but it’s 2020 now and we are well beyond it’s possible limitation period so I can talk about it freely:

Continue reading “Love and Phishing”

After many years of “hobbying” in the security field, I learned that people tend to ignore the possibilities a potential adversary may have. I have had much fun but never wrote about it. And that is a shame. Some of my stories are almost ten years old, and I will certainly come back to them, but now I need to self-reference myself for my bachelor thesis on more relevant issues, so let’s start with that!

Continue reading “Challenges of Securing a Custom Embedded System”