EXPLIoT

Open Source IoT Security Testing and Exploitation Framework | IoT Security Audit Platform | Hardware Hacking Tools

[EXPLIoT @expliot_io]

Ever wondered how hackers break into a chip—literally?

On #TheJhackerShow, @aseemjakhar chats with hardware security pro @reivilo_t about IC Reverse Engineering, netlist extraction and glitching.

Watch here: https://t.co/6y1kb4s9Vq

#HardwareSecurity #Cybersecurity #ChipHacking

[EXPLIoT @expliot_io]

One way out. The AI model found it.

OpenAI's test models exploited a software installer flaw to reach Hugging Face's infrastructure.

A lesson in test environment security.

Aseem Jakhar breaks it down: https://t.co/cXik72aRHS

#AISecurity #CyberSecurity

[EXPLIoT @expliot_io]

Your ZigBee devices are talking. Are you listening?

Scan networks, sniff traffic & replay packets with the EXPLIoT ZigBee Auditor. Test 2.4 GHz IEEE 802.15.4 security.

Get yours: https://t.co/u5pHNuHSZN

#ZigBee #IoTSecurity #WirelessSecurity

[EXPLIoT @expliot_io]

Debug ports help engineers. Left exposed, they can help attackers too.

Learn to identify JTAG, SWD, UART & I2C interfaces with Payatu's IoT Security Part 14.

Read the blog: https://t.co/qMLIRmS4PS

#IoTSecurity #JTAG

[EXPLIoT @expliot_io]

Your connected device is only as secure as its APIs.

Explore the OWASP API Security Top 10 (2023), from broken authorisation to SSRF and misconfigurations.

Download EXPLIoT's free eBook:
https://t.co/kVjvSDfHia

#APISecurity #OWASP #IoTSecurity

[EXPLIoT @expliot_io]

Hard-coded keys in firmware? Moxa's recent advisory shows the risk.

Learn to extract firmware, uncover credentials, analyse binaries & identify vulnerabilities with EXPLIoT Academy.

Enrol: https://t.co/VOcP3MuMef

#FirmwareSecurity #IoTSecurity

[EXPLIoT @expliot_io]

No firmware download? The SPI flash chip may say otherwise.

Learn to identify flash chips, connect to SPI interfaces & extract firmware for analysis.

Watch the full video:
https://t.co/wMOp8pX1zG

#HardwareHacking #SPI #FirmwareSecurity

[EXPLIoT @expliot_io]

A security chip isn't always secure.

Cisco Talos uncovered ReVault firmware flaws in Dell ControlVault, affecting 100+ laptop models.

Can a security chip become an attack surface?

Watch the Jhacker Show: https://t.co/ITEIqVNq27

#HardwareSecurity #FirmwareSecurity

[EXPLIoT @expliot_io]

Stop guessing test pads. Start with a map.

BUS Auditor identifies JTAG/SWD, UART and I2C interfaces on target boards, with 16 protected I/O channels and adjustable voltage.

Pre-order: https://t.co/71F2ONUeo0

#HardwareHacking #IoTSecurity

[EXPLIoT @expliot_io]

How secure is your RFID access card?

Chameleon Tiny lets researchers emulate MIFARE cards, sniff RFID traffic & test access controls.

Explore its capabilities in our blog.

Read now: https://t.co/BqKrPHIelT

#RFID #HardwareHacking #IoTSecurity

[EXPLIoT @expliot_io]

Hardware hacking starts with reading the board.

Learn to identify UART, JTAG, SWD, SPI & I2C, uncover debug interfaces, and practise on real targets with EXPLIoT Academy.

Enrol now: https://t.co/qkPVAy1SEM

#HardwareHacking #IoTSecurity

[EXPLIoT @expliot_io]

A hard-coded private key. Shared across devices.

CISA flags two flaws in Moxa AIG-302 gateways (CVSS 8.1).

Fixed in ThingsPro Edge v1.4.1. Update now.

Read the advisory: https://t.co/pxs5RxvcEN

#IoTSecurity #FirmwareSecurity

[EXPLIoT @expliot_io]

A 0.184 ETH withdrawal. No alert. Then came transfers up to ~$388M.

The Bitget incident shows how attackers test prior striking.

Would your security systems catch the rehearsal?

Aseem Jakhar breaks it down: https://t.co/tLKWwokOiX

#CyberSecurity #ThreatDetection @aseemjakhar

[EXPLIoT @expliot_io]

One device certificate. How much cloud access does it unlock?

With EXPLIoT Framework's AWS IoT MQTT plugins, test what a device identity can actually access, topic by topic.

Watch the walkthrough: https://t.co/VbaLHNR1IU

#IoTSecurity #AWSIoT #MQTT

[EXPLIoT @expliot_io]

24+ hands-on labs. One complete IoT security kit.

Explore UART, JTAG, I2C, SPI, BLE & ZigBee with real hardware, vulnerable targets, and practical tools.

Everything you need to start hacking IoT.

Get yours: https://t.co/RXnAfrvJYm

#IoTSecurity #HardwareHacking

[EXPLIoT @expliot_io]

MQTT and CoAP are everywhere in IoT. Knowing the protocols is one thing. Knowing how to break them is another.

Learn it hands-on with EXPLIoT Academy's Practical IoT Protocol Hacking course.

Explore: https://t.co/xxZpOfHwzM

#IoTSecurity #MQTT #CoAP

[EXPLIoT @expliot_io]

Everyone in Indian security has an opinion about CERT-In. Far fewer hear directly from the people running it.

Aseem Jakhar sits down with Dr Sanjay Bahl to discuss how CERT-In approaches incident response, disclosure, reporting, and coordination.

Watch: https://t.co/1VsP0Lc9WI

[EXPLIoT @expliot_io]

Hardware doesn't tell you where it's vulnerable. You have to find it.

Learn JTAG, UART, SPI, I2C, firmware extraction, and real hardware attack techniques through hands-on labs.

Start building practical hardware hacking skills: https://t.co/qkPVAy1SEM

#HardwareHacking

[EXPLIoT @expliot_io]

🇺🇸 Happy 4th of July!

Independence from Theory.

Celebrate with up to 45% OFF on EXPLIoT Store products and Academy courses.

🛒 https://t.co/iWUW2fOyoa
🎓 https://t.co/b7ODB5lT79

#FourthOfJuly #EXPLIoT #CyberSecurity #IoTSecurity

[EXPLIoT @expliot_io]

Don't learn IoT security in random order.

Learn it the way real assessments happen.

✅ Firmware
✅ Hardware
✅ ARM RE
✅ Protocols
✅ Automotive

🇺🇸 Up to 45% OFF during our 4th of July Sale.
https://t.co/tbtfEcOkxh
#IoTSecurity #FirmwareSecurity

[EXPLIoT @expliot_io]

Software isn't always the target.

On The Jhacker Show, Olivier Thomas explains how attackers extract secrets straight from silicon and bypass security at the hardware level.

Watch: https://t.co/3N8VmhvZYN

#HardwareHacking #ChipSecurity #IoTSecurity #Semiconductor