Remove Authentication Remove Exercises Remove Libraries Remove Manufacturing
article thumbnail

Firmware Fuzzing 101

ForAllSecure

Non-glibc C standard library. Uses uClibc instead of glibc C standard library. We can also find interesting binaries by getting another similar firmware (such as a similar model by another manufacturer) and comparing which binaries are unique to each system with a script. Non-x86 processor architecture. Is a MIPS Linux firmware.

article thumbnail

Firmware Fuzzing 101

ForAllSecure

Non-glibc C standard library. Uses uClibc instead of glibc C standard library. We can also find interesting binaries by getting another similar firmware (such as a similar model by another manufacturer) and comparing which binaries are unique to each system with a script. Non-x86 processor architecture. Is a MIPS Linux firmware.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Weekly podcast: 2018 end-of-year roundup

IT Governance

As is now traditional, I’ve installed myself in the porter’s chair next to the fire in the library, ready to recap some of the year’s more newsworthy information security events. The year started with the revelation of Spectre and Meltdown – major security flaws affecting processors manufactured by Intel, ARM and AMD.

article thumbnail

The Hacker Mind: Hacking IoT

ForAllSecure

In 2013, researcher Nitesh Dhanjani found that a popular brand used simple MD5 hashes of the device's MAC addresses for authentication. Problem is, MAC addresses are not great for authentication. The Department of Justice, have submitted letters to the Library of Congress who manages those exemptions. I don't know.

IoT 52
article thumbnail

The Hacker Mind: Hacking IoT

ForAllSecure

In 2013, researcher Nitesh Dhanjani found that a popular brand used simple MD5 hashes of the device's MAC addresses for authentication. Problem is, MAC addresses are not great for authentication. The Department of Justice, have submitted letters to the Library of Congress who manages those exemptions. I don't know.

IoT 52