https://www.somersetrecon.com/blog daily 0.75 2024-08-23 https://www.somersetrecon.com/blog/2024/automated-bug-hunting-with-semgrep monthly 0.5 2024-08-26 https://www.somersetrecon.com/blog/2024/6/5/reversing-the-unicorn monthly 0.5 2024-06-14 https://www.somersetrecon.com/blog/2022/hacking-the-furbo-dog-camera-part-iii monthly 0.5 2022-12-08 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/95af2f6b-c171-4939-9e96-065639349a08/image2.png Blog - Hacking the Furbo Dog Camera: Part III Fun with Firmware - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/205b39b0-47c1-412c-9a2d-c62d71937563/image6.png Blog - Hacking the Furbo Dog Camera: Part III Fun with Firmware - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/bfa1c2a8-6646-42b0-bf05-c8828d6c6ab3/image14.png Blog - Hacking the Furbo Dog Camera: Part III Fun with Firmware - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/e987a2c7-933c-4ec8-8651-7ce017e11143/image7.png Blog - Hacking the Furbo Dog Camera: Part III Fun with Firmware - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/ecaa6ce2-e75f-4ae1-8bd7-3264ed5f3277/image5.png Blog - Hacking the Furbo Dog Camera: Part III Fun with Firmware - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/9eb1a4e9-5832-4c05-93cc-551faa65440d/image1.png Blog - Hacking the Furbo Dog Camera: Part III Fun with Firmware - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/6d3c1662-0b2f-4062-9951-6aa020e16e83/image11.png Blog - Hacking the Furbo Dog Camera: Part III Fun with Firmware - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/6711b910-7804-4cd6-8a4c-24c4ebfbc33a/image15.png Blog - Hacking the Furbo Dog Camera: Part III Fun with Firmware - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/5688d311-3017-469c-ad55-dea8e6edf8d9/image9.png Blog - Hacking the Furbo Dog Camera: Part III Fun with Firmware - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/4c0581dc-1bae-4d78-981b-dd9d6b8f123f/image13.png Blog - Hacking the Furbo Dog Camera: Part III Fun with Firmware - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/74d7ccd8-14d2-41b4-ad6d-48132325ce1f/image10.png Blog - Hacking the Furbo Dog Camera: Part III Fun with Firmware - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://www.somersetrecon.com/blog/fuzzing-for-cves-part-i-local-targets monthly 0.5 2024-08-17 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/6c6a56a9-2293-4539-96f9-544ba003e1c6/Screen+Shot+2022-10-13+at+1.41.19+PM.png Blog - Fuzzing for CVEs Part I (Local Targets) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/19a78326-cd02-41f4-8faf-419240c41ee0/my_c.png Blog - Fuzzing for CVEs Part I (Local Targets) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/12b7d422-b1c4-4cd6-9853-c280150018d3/Screen-Shot-2022-06-30-at-4.37.18-PM.png Blog - Fuzzing for CVEs Part I (Local Targets) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/40105a0b-5b25-4a4b-bcea-cc73de8eea71/aflpp_bg-768x769_1_50.png Blog - Fuzzing for CVEs Part I (Local Targets) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/75f3e228-df45-4334-b8a9-90567e319556/afl_plus_plus_install_kali.png Blog - Fuzzing for CVEs Part I (Local Targets) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/55b30fdf-5b56-419d-be44-db316519bf02/md2roff_compile_AFL.png Blog - Fuzzing for CVEs Part I (Local Targets) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/81883052-c70d-4dc0-801d-f89104340890/mkdir_input_output.png Blog - Fuzzing for CVEs Part I (Local Targets) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/cc4d2f88-db9c-4bbb-b061-968f216adb0e/afl_sample_input-1.png Blog - Fuzzing for CVEs Part I (Local Targets) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/5cca5449-3c53-4f19-a434-50ffc9e19ac8/start_afl.png Blog - Fuzzing for CVEs Part I (Local Targets) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/ffcd0a71-261d-4504-b2fc-261ca9e7a45c/afl-fuzz.png Blog - Fuzzing for CVEs Part I (Local Targets) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/cfa4dfd8-cd1c-4575-accb-a5d881bd552f/Screen-Shot-2022-06-30-at-5.55.04-PM.png Blog - Fuzzing for CVEs Part I (Local Targets) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/e0aac333-fe40-426c-b68c-fc5a57d7ad4b/Screen-Shot-2022-06-30-at-5.55.43-PM.png Blog - Fuzzing for CVEs Part I (Local Targets) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/6aae300e-ee31-4f2e-8588-af3be1ae46ec/vuln_md_file.png Blog - Fuzzing for CVEs Part I (Local Targets) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/8f3f7359-1377-4bad-ba71-0806d7024ace/segfault.png Blog - Fuzzing for CVEs Part I (Local Targets) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/186a1445-2bd7-4316-9686-617204e344f8/gdb_registers.png Blog - Fuzzing for CVEs Part I (Local Targets) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://www.somersetrecon.com/blog/2021/hacking-the-furbo-dog-camera-part-ii monthly 0.5 2021-10-12 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1630603797341-BCJ6DTIEK9V6VX1ITPAU/nmap_results.png Blog - Hacking the Furbo Dog Camera: Part II - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1630604753579-55EGI5H38KKBOEZ0NQYP/stickers_combo.png Blog - Hacking the Furbo Dog Camera: Part II - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1631562650227-1TWS54OU0H2AW8S2AXTY/furbo.jpg Blog - Hacking the Furbo Dog Camera: Part II - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1630605616198-N3E8RBGGBFR2FRQ1YZXN/teardown_assembled.jpg Blog - Hacking the Furbo Dog Camera: Part II - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1630606730450-2E7SPSKPWRVF9AL1CYGW/2.5t_auth_dialog.png Blog - Hacking the Furbo Dog Camera: Part II - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1630607109503-CQR0ID27WCJAQ8DLNGU0/modify_realm.png Blog - Hacking the Furbo Dog Camera: Part II - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1630607180892-XFTB40FCBJ1IUXQ005FT/Screen+Shot+2021-05-05+at+2.06.19+PM.png Blog - Hacking the Furbo Dog Camera: Part II - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1630607213642-PMYLEBTTON7L103TFPKF/ambarella_http_ldc.png Blog - Hacking the Furbo Dog Camera: Part II - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1630609014794-JDBUFRPQ0D13IBW2SUNM/normal_req.png Blog - Hacking the Furbo Dog Camera: Part II - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1630609039567-9HWISOFGR9ZD95IEXI6S/normal_resp.png Blog - Hacking the Furbo Dog Camera: Part II - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1630609071853-KPUEVUA1G56LXXXKRRBV/cmd_inj_req.png Blog - Hacking the Furbo Dog Camera: Part II - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1630609090089-6ETHYES4UKQNUU23C21H/cmd_inj_response.png Blog - Hacking the Furbo Dog Camera: Part II - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1630611049767-6KS6UYWDKPTSHN3Y5PH0/cmd_inj_ghidra.png Blog - Hacking the Furbo Dog Camera: Part II - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://www.somersetrecon.com/blog/2021/hacking-the-furbo-part-1 monthly 0.5 2021-04-26 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1618444994807-2H8B1OWU3S4NDEF49NC9/DSC_0773.JPG Blog - Hacking the Furbo Dog Camera: Part I https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1618446490073-AGOJQCB8J1WSQMQAP5GZ/DSC_0550.jpg Blog - Hacking the Furbo Dog Camera: Part I https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1618447461579-AOCK80Q38IIBRGWBYIPD/DSC_0592_brighter.jpg Blog - Hacking the Furbo Dog Camera: Part I https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1618448455486-XRGF1229ZAL1OLUOQW4L/DSC_0577.jpg Blog - Hacking the Furbo Dog Camera: Part I https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1618448562010-Q36MIJSIPJFIJN4XLGBH/DSC_0583.jpg Blog - Hacking the Furbo Dog Camera: Part I https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1618450140952-FM4ELVLO1G1L4JPERBYN/DSC_0583_lines.png Blog - Hacking the Furbo Dog Camera: Part I https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1618453175802-AOI92SY1F6WNXCSK2KO7/500_As_gdb.png Blog - Hacking the Furbo Dog Camera: Part I https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1618453452414-T3DR64XXBX7MSAJHAGGQ/bo_watin_for_shellz.JPG Blog - Hacking the Furbo Dog Camera: Part I https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1618454595926-ZIIFYWNZT74VWMUJGAKV/aslr_shell.png Blog - Hacking the Furbo Dog Camera: Part I https://www.somersetrecon.com/blog/2019/8/5/layerone-2019-ctf-log-viewer monthly 0.5 2019-08-16 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565054547957-89KRH5O0ZQGLM3N2PBAC/image7.png Blog - LayerOne 2019 CTF - LogViewer https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565128530504-UXJTGAWQQIYP1Y506ISM/image14.png Blog - LayerOne 2019 CTF - LogViewer https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565128651994-ZHO15BFIUC6MD1K9Y5Q9/image1.png Blog - LayerOne 2019 CTF - LogViewer https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565128793877-EI0M190B88ZQYFF3MFYQ/image5.png Blog - LayerOne 2019 CTF - LogViewer https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565132323234-7OQDQS80OZV2DZ1H2M1N/image11.png Blog - LayerOne 2019 CTF - LogViewer https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565132373518-MX24IZBGSRT9UZI4X4IY/image-asset.png Blog - LayerOne 2019 CTF - LogViewer https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565132394131-9JOQJYR0D4N7Y8VSAFUI/image-asset.png Blog - LayerOne 2019 CTF - LogViewer https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565191658642-TDYY23193FIESJ1SMG19/image2.png Blog - LayerOne 2019 CTF - LogViewer https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565191702687-0BJ5KUJUFTQ1Q27V9P2T/image10.png Blog - LayerOne 2019 CTF - LogViewer https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565191744287-UOFDA41X395V27QVXR9S/image-asset.png Blog - LayerOne 2019 CTF - LogViewer https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565191817376-K300GI6G6K8PXXLUFUOO/image-asset.png Blog - LayerOne 2019 CTF - LogViewer https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565193416201-Z3RHPU5XFH3T8ZGM8NH4/image-asset.png Blog - LayerOne 2019 CTF - LogViewer https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565193461295-I68KZC8PNA1IF4LRINZW/image-asset.png Blog - LayerOne 2019 CTF - LogViewer https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565193553505-XAVTSW4V3FBDHNAFKJH4/image-asset.png Blog - LayerOne 2019 CTF - LogViewer https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565193651300-VEAP51QIEMPW9Q8KWZGX/image-asset.png Blog - LayerOne 2019 CTF - LogViewer https://www.somersetrecon.com/blog/2019/ghidra-plugin-development-for-vulnerability-research-part-1 monthly 0.5 2019-08-16 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1554153375763-894GHUISYKN43KKGD718/image-asset.gif Blog - Ghidra Plugin Development for Vulnerability Research - Part-1 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1554154177487-KO61ARHUDH1MI5AM6AEQ/image-asset.gif Blog - Ghidra Plugin Development for Vulnerability Research - Part-1 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1554154655281-ONSHXI9DA4S5VLTAHOGJ/image-asset.gif Blog - Ghidra Plugin Development for Vulnerability Research - Part-1 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1554155685053-HJMDFJ2U2V7KERPY1EAB/ghidra_output4.png Blog - Ghidra Plugin Development for Vulnerability Research - Part-1 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1554155536446-COL0DKS6EXYFC3ZN93K8/image-asset.gif Blog - Ghidra Plugin Development for Vulnerability Research - Part-1 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1554155764255-44AM1UDHK5OINH2WQQYI/ghidra_output6.png Blog - Ghidra Plugin Development for Vulnerability Research - Part-1 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1554155826476-DCDCS5YIJ4JD76BJWHU6/ghidra_output7.png Blog - Ghidra Plugin Development for Vulnerability Research - Part-1 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1554155953691-F524GFA87ZMYC0FQIONX/ghidra_output8.png Blog - Ghidra Plugin Development for Vulnerability Research - Part-1 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1554443873267-YEITLQMU8Y53PJ1445WK/ghidra_output9.png Blog - Ghidra Plugin Development for Vulnerability Research - Part-1 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1554156116646-DZDOWP8SRLUO8J7C6Y8E/ghidra_output9.png Blog - Ghidra Plugin Development for Vulnerability Research - Part-1 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1554156205095-JTQUAMAA5TK30R9K1M28/ghidra_output10.png Blog - Ghidra Plugin Development for Vulnerability Research - Part-1 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1554320077275-VA5CR62LWJDND71JR32R/ghidra_output15.png Blog - Ghidra Plugin Development for Vulnerability Research - Part-1 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1554156281322-7OTS5UWS7QUP7KXJ17YF/ghidra_output11.png Blog - Ghidra Plugin Development for Vulnerability Research - Part-1 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565995069082-PPSVF1MQ5D0O0GGKKGHV/ghidra_output12.png Blog - Ghidra Plugin Development for Vulnerability Research - Part-1 https://www.somersetrecon.com/blog/2018/8/2/idapython-part-2 monthly 0.5 2018-11-20 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1533230452771-9F96PZR471CINHYH6QXJ/blog_1.png Blog - Introduction to IDAPython for Vulnerability Hunting - Part 2 Example of inlined strcpy() - Disassembly on left, HexRays decompiled version on right https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1533230410558-ITM1PUMS9944LVZ3AH7J/blog_2.png Blog - Introduction to IDAPython for Vulnerability Hunting - Part 2 Output of Script Against EQNEDT32.exe https://www.somersetrecon.com/blog/2018/7/27/infecting-the-embedded-supply-chain monthly 0.5 2018-08-14 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1532704637868-PBXQ5YBYQNQLD8B729BG/blog_1.png Blog - Infecting the Embedded Supply Chain Format String Vulnerability Demonstration https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1532704710257-LZKOUROOWCFFUB5M6HLP/blog_2.png Blog - Infecting the Embedded Supply Chain Hex-Rays Output of the Source of the Vulnerability https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1532704798560-XUBP7WVFFKVEQ1965IY3/blog_3.png Blog - Infecting the Embedded Supply Chain Exception Thrown when Reading Memory "AAAA" https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1532704895677-LTBX0O2ZW284V6ILMY90/blog_4.png Blog - Infecting the Embedded Supply Chain Hex-Rays Output Showing the Creation of a Telnet Server Thread https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1533327983074-7YRFUQICHHRL9XJXQCIL/j_link_serial_number.jpg Blog - Infecting the Embedded Supply Chain Segger Serial Number Divided into Sections https://www.somersetrecon.com/blog/2018/7/25/game-hacking-hammerwatch-invincibility monthly 0.5 2018-08-06 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1532551366005-TIC4HTCM9C6I40KQUCSR/blog_image_2.png Blog - Game Hacking: Hammerwatch Invincibility Dnspy Provides the Full Decompiled Source https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1532551540053-7F9PD8WC9L469OYPRU2Y/blog_image_3.gif Blog - Game Hacking: Hammerwatch Invincibility Invincibility Cheat in Effect. Left-side is what the cheater sees, and the Right-side is what the other players see https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1532551649163-GIJKBH05BSEHJA5PL8OH/blog_image_4.gif Blog - Game Hacking: Hammerwatch Invincibility RainingDeath Custom Attack in Effect - Left-side is what the cheater sees, Right-side is what the other players see https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1532551183764-T2E0NN7XBPTPEM0AC8BG/image_1.gif Blog - Game Hacking: Hammerwatch Invincibility The End Result: Playing Hammerwatch using Invincibility Mode, Unlimited Mana Mode, and a Custom Multi-Arrow Spin Attack https://www.somersetrecon.com/blog/2018/7/6/introduction-to-idapython-for-vulnerability-hunting monthly 0.5 2018-07-12 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1530919824456-J9VEZP9JXLP5CNXRQEW3/vrblog_fig1_get_func_names.png Blog - Introduction to IDAPython for Vulnerability Hunting https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1530920915955-8I2KHL9XD16Y77M2ZQ1L/vrblog_fig2_strcpy_calls.png Blog - Introduction to IDAPython for Vulnerability Hunting https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1530920996839-G9PFEGTSL25HT80PJJKH/vrblog_fig3_function_call.png Blog - Introduction to IDAPython for Vulnerability Hunting https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1530921803226-5ZOFTKO5IXVFLUAVONNJ/vrblog_fig4_output.png Blog - Introduction to IDAPython for Vulnerability Hunting https://www.somersetrecon.com/blog/2018/5/2/gameon-competition-and-abusing-scada-hmi-project-files monthly 0.5 2018-05-02 https://www.somersetrecon.com/blog/2016/10/14/electronic-safe-lock-analysis-part-2- monthly 0.5 2016-12-13 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1480635627918-JF0A5MM2NL68FLMSRXP7/image-asset.png Blog - Electronic Safe Lock Analysis: Part 2 Figure 1: Wireshark capturing Bluetooth traffic with wardriving filter https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1480635830270-01KK45XZSHZP5S6QKYGZ/image-asset.png Blog - Electronic Safe Lock Analysis: Part 2 Figure 2: Bluetooth application payload containing the receiver MAC address (pink), sender MAC address (cyan), PIN (green), and open time (blue) https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1480635871000-ZS5APDHF7CDVRKEZAKWK/image-asset.png Blog - Electronic Safe Lock Analysis: Part 2 Figure 3: PIN in hexadecimal format https://www.somersetrecon.com/blog/2016/6/7/electronic-safe-lock-analysis-part-1-teardown monthly 0.5 2016-06-21 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1465337871864-DKH9XF0CQ5JMAS0S5KY4/image-asset.jpeg Blog - Electronic Safe Lock Analysis: Part 1 - Teardown https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1465323695410-3XYYEF5M3IEHR01LPH6K/image-asset.jpeg Blog - Electronic Safe Lock Analysis: Part 1 - Teardown Front side of the entry pad circuit board shows power connections for a 9V battery and a 10-pin debugging interface (J1). https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1465324097537-O5BKH03VM4D70L8PGK0N/image-asset.jpeg Blog - Electronic Safe Lock Analysis: Part 1 - Teardown Back side of the entry pad is where the board’s main MCU, a Renesas μPD78F0515A (U1), can be found. It’s accompanied with an NXP QN902X SoC (U6) for BLE communication. Peripherals, such as the 8-pin keypad header (P1) and 4-pin serial interface (P3; ref above) to the lock-body are also located on this side. This serial interface is both used for communication and to carry power to the lock body. There are unpopulated footprints (U2, U4, BAT1), which may have been used in previous revisions of this board, for debugging purposes, or other models of this entry pad. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1465324238498-2IQM5Z9LDCA0VDHTXB5Q/image-asset.jpeg Blog - Electronic Safe Lock Analysis: Part 1 - Teardown Front side of the lock body circuit board uses a less featureful Renesas μPD78F9234 MCU (U1). It is only known to communicate with a entry pad over the wired 4-pin serial communication interface (JP1), but there is another serial interface (JP2) adjacent to it that is hidden by the lock body cover. Additionally hidden is a 2-pin connector (P1) that is tied to pin 14 on the MCU. Its purpose is still undetermined. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1465324429747-JQ0DG1TO8NO7HGDXA9D5/image-asset.jpeg Blog - Electronic Safe Lock Analysis: Part 1 - Teardown Back side of the lock body reveals another 8-pin debugging interface (J1; under sticker) and the hardware reset button (SW1). The reset button allows the lock body and entry pad to “relink” if the devices were to somehow fall out of sync with each other. The reset button is also used when connecting a preconfigured lock body with a new entry pad. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1465324535365-H0L8U001GSIFMVSI5GM7/image-asset.jpeg Blog - Electronic Safe Lock Analysis: Part 1 - Teardown The lock body is the only mechanical part of the system. It is composed of a DC motor and bolt. If 5 volts is applied across the red and yellow wires shown, the DC motor will retract the bolt and allow the security container to be opened. https://www.somersetrecon.com/blog/2016/1/21/hello-barbie-security-part-2-analysis monthly 0.5 2016-01-25 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1453416368467-H8HMIJAGAQ600XDLN6AR/image-asset.png Blog - Hello Barbie Security: Part 2 - Analysis https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1453416426692-1RENPEFKA259EVPUUWO6/image-asset.png Blog - Hello Barbie Security: Part 2 - Analysis https://www.somersetrecon.com/blog/2015/11/20/hello-barbie-security-part-1-teardown monthly 0.5 2015-11-21 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1448058902622-YNSOINIKZ2S3VPBBTBZ7/image-asset.jpeg Blog - Hello Barbie Security: Part 1 - Teardown https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1448059099036-L1T68FGQO62QBPR8BGG0/image-asset.jpeg Blog - Hello Barbie Security: Part 1 - Teardown Hello Barbie main circuit board. Front side. Showing Wi-Fi module, flash memory, audio codec, and debugging headers. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1448059139546-14BP22NYD8AQ1B0MML2P/image-asset.jpeg Blog - Hello Barbie Security: Part 1 - Teardown Hello Barbie main circuit board. Back side. Showing LEDs, test points, and main button. https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1448059741836-40XKV9WSOSSP3IRTOGGQ/image-asset.png Blog - Hello Barbie Security: Part 1 - Teardown Screenshot of firmware being dumped from Barbie's flash memory. https://www.somersetrecon.com/blog/tag/Barbie monthly 0.5 https://www.somersetrecon.com/blog/tag/IDA+Pro monthly 0.5 https://www.somersetrecon.com/blog/tag/IDA monthly 0.5 https://www.somersetrecon.com/blog/tag/AFL monthly 0.5 https://www.somersetrecon.com/blog/tag/Firmware+Exploitation monthly 0.5 https://www.somersetrecon.com/blog/tag/IDAPython monthly 0.5 https://www.somersetrecon.com/blog/tag/CVE-2022-36752 monthly 0.5 https://www.somersetrecon.com/blog/tag/Reverse+Engineering monthly 0.5 https://www.somersetrecon.com/blog/tag/Furbo+Update+MiTM monthly 0.5 https://www.somersetrecon.com/blog/tag/Zero-Day monthly 0.5 https://www.somersetrecon.com/blog/tag/IoT monthly 0.5 https://www.somersetrecon.com/blog/tag/Vulnerability+Analysis monthly 0.5 https://www.somersetrecon.com/blog/tag/CVE-2022-34913 monthly 0.5 https://www.somersetrecon.com/blog/tag/Keurig monthly 0.5 https://www.somersetrecon.com/blog/tag/Hardware+Hacking monthly 0.5 https://www.somersetrecon.com/blog/tag/CVE-2022-34556 monthly 0.5 https://www.somersetrecon.com/blog/tag/Teardown monthly 0.5 https://www.somersetrecon.com/blog/tag/Hello+Barbie monthly 0.5 https://www.somersetrecon.com/blog/tag/Fuzzing monthly 0.5 https://www.somersetrecon.com/blog/tag/Ghidra monthly 0.5 https://www.somersetrecon.com/blog/tag/CVE-2022-41220 monthly 0.5 https://www.somersetrecon.com/blog/tag/Semgrep monthly 0.5 https://www.somersetrecon.com/blog/tag/Plugin monthly 0.5 https://www.somersetrecon.com/home daily 1.0 2016-01-23 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1415297928596-WBZ6W5LW7SRV88S73VPI/image-asset.jpeg Home Photo by Nirian/iStock / Getty Images https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1415298035990-S2PADFGJX9BGMKYL0PCR/image-asset.jpeg Home Photo by Miha Peroša/iStock / Getty Images https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1415298153992-CLH3VYD9HBX7EZ7BBNA7/image-asset.jpeg Home Photo by uchar/iStock / Getty Images https://www.somersetrecon.com/services daily 0.75 2016-02-25 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1415298940687-2XURUXW19HI85QSANW4U/image-asset.jpeg Services Photo by DustyPixel/iStock / Getty Images https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1415298987846-E7STH816K3TIKSIAFLOY/image-asset.jpeg Services Photo by Robert Churchill/iStock / Getty Images https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1415299049756-AAQ44SWWUXTECLSCA14L/image-asset.jpeg Services Photo by Image Source/Stockbyte / Getty Images https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1415299120809-BH7OJNUDJP9IAPYP2FYO/image-asset.jpeg Services Photo by User9637786_380/iStock / Getty Images https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1415299218341-WDON1E2N5006NUY90HVZ/image-asset.jpeg Services Photo by Purestock/Purestock / Getty Images https://www.somersetrecon.com/contact daily 0.75 2014-12-02 https://www.somersetrecon.com/industries daily 0.75 2016-04-29 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1415300716831-YZOJIQER0QXPWYHBZQ6G/image-asset.jpeg Industries https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1415298603871-FR3QJ2H8IVL6X84CT7VL/image-asset.jpeg Industries Photo by Chesky_W/iStock / Getty Images https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1415298699830-LF4BCOMS56D1X7DAIS0C/image-asset.jpeg Industries Photo by plusphoto/amanaimagesRF/amana images / Getty Images https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1415298763025-EVGL28DGKCUOYZYKI98X/image-asset.jpeg Industries Photo by Gregory_DUBUS/iStock / Getty Images https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1461968895573-0AUVVWI3WLIXCPI26349/image-asset.jpeg Industries https://www.somersetrecon.com/about daily 0.75 2016-02-25 https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1453592989422-MP6AEHCICDVLDELWYE96/image-asset.jpeg About Photo by sezer66/iStock / Getty Images https://www.somersetrecon.com/careers daily 0.75 2022-07-07 https://www.somersetrecon.com/careers/pen-tester daily 0.75 2021-06-29 https://www.somersetrecon.com/embedded-security-professional daily 0.75 2021-06-29 https://www.somersetrecon.com/account-manager daily 0.75 2021-06-29