nSinus-R (@[email protected])

Captures flags with @TeamTasteless. Assistant Professor at @unibirmingham and maintainer of FirmWire & avatar2.

[Tobias Scharnowski @ScepticCtf]

A virtual iteration of our training on fuzzing custom embedded systems is coming up end of March.

One cool story about this: The participants of our training in 2024 exploited a bunch of devices at Pwn2Own Tokyo 2026!🔥

Details: https://t.co/D0nGEpnPS6

[nSinus-R (@[email protected]) @nSinusR]

In case you missed the live version, the recording of our talk is now available: https://t.co/QgnRKbxOlu!

[stacksmashing @ghidraninja]

En route to #39c3 - come to our talk at 4pm!

I will only be there today and tomorrow, but happy to meet-up & chat.

Also, if you are at #39c3 and often dump SPI flash-chips please let me know, I might have something for you that I'm looking for feedback on 🙂

[stacksmashing @ghidraninja]

En route to #39c3 - come to our talk at 4pm!

I will only be there today and tomorrow, but happy to meet-up & chat.

Also, if you are at #39c3 and often dump SPI flash-chips please let me know, I might have something for you that I'm looking for feedback on 🙂

[hardwear.io @hardwear_io]

🤩A hush settles as the RP2350’s challengers—Marius Muench and Thomas Roth—begin their story

What started as a public hacking challenge became a trail of breakthroughs, from unverified vector boots to secrets pulled straight out of OTP memory.

👉https://t.co/F4p6bUrekw

#RP2350

[hardwear.io @hardwear_io]

🔍 It’s reverse engineering mayhem as participants trace how basebands whisper to each other inside the Shannon modem, mapping flows that feel straight out of a sci-fi network core.

In action Marius Muench; Tobias Scharnowski at #hw_ioNL2025

👉https://t.co/JE9xdoqHVu

#fuzzing

[nSinus-R (@[email protected]) @nSinusR]

@defcon @Cowtickle @TomChothia More information about our research, slides, and additional resources are available at: https://t.co/MSFN3qbn1i

[nSinus-R (@[email protected]) @nSinusR]

Our @defcon'33 talk is online:
https://t.co/RPY7WZx8Qz!

Ever wondered how to get banned from online games without cheating? We've got you covered! Check out this talk for fun hacks tripping off modern anticheats.

Joined work with @Cowtickle & @TomChothia.

[lukas seidel @pr0me]

I absolutely love this paper, so much reverse engineering alpha

the researchers who won the rpi hacking challenge came together to describe in detail how they overcame the defenses of a secure-by-design chip, incl. custom laser fault injection and single instruction skips

[Google VRP (Google Bug Hunters) @GoogleVRP]

We have an exciting piece of vulnerability research 🕵️‍♂️ to share, conducted in collaboration with external researchers from VU Amsterdam. Find out more about the L1TF vulnerability, a CPU vulnerability on some Intel CPUs (Skylake and older).

https://t.co/n6X5FoRJCR

[hardwear.io @hardwear_io]

#SecureBoot is the clubs bouncer🕺🚫—but a double glitch is like sneaking past while he blinks

That’s the magic (and mischief) in the #RP2350. @nSinusR & @ghidraninja will show you how it happened at #hw_ioNL2025 and why fixing it makes chips stronger

👉https://t.co/F4p6bUrekw

[hardwear.io @hardwear_io]

📶 Ever wondered how your phone seamlessly switches between 2G, 3G, 4G and 5G?

Join Marius Muench & @ScepticCtf at #hw_ioNL2025 to peel back the layers of #basebandfirmware to show how your device talks to the world—from older 2G networks to modern 5G

👉https://t.co/JE9xdoqHVu

[nSinus-R (@[email protected]) @nSinusR]

Our work on solving @Raspberry_Pi's RP2350 Hacking Challenge is now online! 5 different attacks and lots of lessons learned.

Joint work with Aedan Cullen, Kévin Courdesses, @ghidraninja and @azonenberg!

Full paper: https://t.co/iYuoPpBMCi

Source code: https://t.co/BkYj8kqpqK

[lukas seidel @pr0me]

new baseband rehosting research just dropped!

BaseBridge dynamically identifies relevant regions from a memory dump which are then loaded into the FirmWire emulator to enrich global state.
this leads to way higher fidelity, more coverage during fuzzing, and finally more bugs.

[Daniel Klischies @danielklischies]

📢 Excited to announce that the results on BaseBridge, our project on improving cellular baseband emulation, are going public this week. @dyonwg_ will present at @IEEESSP on Monday 3pm, while David and I will be on stage at @offensive_con on Saturday 11am with more details! 1/6

[ACM SURE Workshop @sureworkshop]

We are excited to announce that the 1st Workshop on Software Understanding and Reverse Engineering (SURE) will be co-located at ACM CCS 2025 in Taiwan! We invite the community to submit their awesome research https://t.co/8RTLR383kw.

So, what is SURE? More in the 🧵

[RE//verse @REverseConf]

No joke, another video! @nsinusr and Tomasz share the ins and outs of modern SIM hacking! https://t.co/khYnV5e6pE

[nSinus-R (@[email protected]) @nSinusR]

Really enjoyed speaking at the inaugural edition of
@REverseConf!

You can find our slides on tricks with SIMs and interposers here: https://t.co/P93b7PoM29

[nSinus-R (@[email protected]) @nSinusR]

@xvonfers @REverseConf Oups, thank you. Correct link here: https://t.co/P93b7PoM29.

Will create a new post.

[RE//verse @REverseConf]

SIM cards: more than just storage. Join Marius Muench (@nsinusr) & Tomasz Lisowski as they reveal SIM vulnerabilities, baseband exploits, and turning SIM interposers into attack tools. Live demos & insights await! https://t.co/tVIc2mXJTZ #REverse2025 #BasebandHacking

[nSinus-R (@[email protected]) @nSinusR]

Results of the RP2350 Hacking Challenge are now public - I'm happy that my entry qualified as one of the winning breaks!

Also huge shout out to the other winners: @aedancullen, Kévin Courdesses, @IOActive & @hextreeio - awesome work!

Thanks for the challenge @Raspberry_Pi!

[Raspberry Pi @Raspberry_Pi]

Security through transparency: all chips have vulnerabilities, and most vendors' strategy is not to talk about them. In contrast, we aim to find and fix them.

Read the results of our RP2350 Hacking Challenge: https://t.co/g3ZOPw8Rqp