CyberInfinite

Random dude on the internet. Not interested in AI. I like retro games. This year at OrangeCon

[CyberInfinite @CyberInfinite]

Running the Hardware Hacking Village at @OrangeCon_nl was an incredible experience!
My highlight was catching up with former training participants and hearing where their hardware hacking journeys have taken them. Some have found real 0 days which was incredibly rewarding. Thx!

[CyberInfinite @CyberInfinite]

@herrmann1001 Great job! They key for me is preparation. I spemt 95% of the time getting the cable in place and only 5 % on the actual micto soldering :) most of the time I only have to gently press it down for 2 seconds :)

[CyberInfinite @CyberInfinite]

This year you can find me at the Hardware Hacking Village at @OrangeCon_nl. If you want to gain some hands-on experience, this is the place to be. Here are a few impressions of what awaits you. Come and say hello! :) https://t.co/SQPjRiFU6X

[CyberInfinite @CyberInfinite]

Do you guys twist your uart connection? If not, it can make a huge difference if you can enter the bootloader or not 😅 spent my whole thursday on it… if you use the typical jumper wires, they cause some interference on the other line which ended up with no bootloader response

[Julien | MrTuxracer 🇪🇺 @MrTuxracer]

I’ve updated my blog post about CVE-2025-9501 and included bypasses for all W3 Total Cache versions up to and including the latest 2.8.15. #wordpress #security

https://t.co/PVBnKi0rO8

[atc1441 @atc1441]

Simple Spectrum Analyzer on the nRF52832 / allmiibo clone device that is available on aliexpress for as low as 10€

[CyberInfinite @CyberInfinite]

Part 2: how to dump the firmware from #IoT devices. This time we are using u-boot, which is not my preferred way but handy when dealing with eMMCs. If you can interrupt the bootloader you normally get shell access. If it is pw locked ->wait for part 3 :) https://t.co/h2yFiS3euK

[CyberInfinite @CyberInfinite]

@boredpentester Ahh sorry to hear :/ thank you for this amazing writeup. I need to read it multiple times :D wish you all the best for the automotive category! Good luck! :)

[CyberInfinite @CyberInfinite]

@l33d0hyun Imagine having a bug collision and lining up 2nd 😅

[CyberInfinite @CyberInfinite]

In this video series I will show you different kind of options when it comes down to firmware extraction of IoT devices.

We start with the most reliable and fastest option. The only downside: It requires a root shell (uart).

https://t.co/kQdZdythCA

[CyberInfinite @CyberInfinite]

Nice! Thanks for sharing! :)

[Alex Plaskett @alexjplaskett]

Just published a small write-up of a vulnerability found in Tesla TCU which was useful to enable further research on the IVI!

https://t.co/ZQB2she2Yf

[CyberInfinite @CyberInfinite]

Keeping track of all the different rooting options is quite hard. Therefore I created the following cheat sheet, to make this approach a little bit easier. These are just the typical hardware options to gain root access on a device. Software will follow next :) do I miss sth? :)

[CyberInfinite @CyberInfinite]

@b1ack0wl Do you participate or just for fun? :)

[Xeno Kovah @XenoKovah]

The @SEC_T_org organizers posted the video from my talk "Crowdsourcing Bluetooth identity, to understand Bluetooth vulnerability" in what seems like record time. You can find the video & slides (and previous truncated-for-time version) here: https://t.co/DgcgQv9GZI

[OrangeCon @OrangeCon_nl]

All #OrangeCon2025 talks are now online!
Watch them on our YouTube channel: https://t.co/nchTeqVwkP

[CyberInfinite @CyberInfinite]

@MakeAugusta Whatever this is, the wiring is ben eater approved.

[CyberInfinite @CyberInfinite]

@BitBangingBytes Great movie! Really kicked in when heartbleed happened :D but I see, you already got the universal decipher left next to you :D

[Faiz Siddiqui @faizsays]

New: Tesla said it didn't have critical data in a fatal crash. Then a hacker found it. "For any reasonable person, it was obvious the data was there."

The story of white hat hacker @greentheonly's role in the case the led to a $243 million verdict against Tesla.

[CyberInfinite @CyberInfinite]

Seeing talks like this makes me wonder when top tier exploiters team up with hardware people to craft the next level exploit? It does not have to work on other devices if it gives you the ability to jailbreak yours? Is this collab already happening? :D

[NULLCON @nullcon]

Lukas Maar discovered two timing #sidechannel attacks that give away hidden map in the #LinuxKernel

One attack uses timing in kernel tables, the other leaks clues from the #TLB. Together, they let users find hidden kernel objects.

👉 https://t.co/oz8AUvYgsl

#NullconBerlin2025

[CyberInfinite @CyberInfinite]

@b1ack0wl @phrack @richinseattle @netspooky Awesome writeup! Thanks for sharing! :)