https://www.somersetrecon.com/blogdaily0.752026-04-27https://www.somersetrecon.com/blog/2026/4/27/quacc-automated-open-source-vulnerability-discoverymonthly0.52026-05-06https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/622ae4cb-f78b-47fa-b1d1-4e0d424a34e1/Quac%2B%2B\_blog\_figure1\_1.pngBlog - Quacc++: Automated Open Source Vulnerability Discovery - Make it stand outFigure 1.1: Using regex to search for password variables stored as strings w/ Grep.apphttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/8520f66f-39f6-4527-a6ce-5ba1a868dd54/Quac%2B%2B\_blog\_figure1\_2.png.pngBlog - Quacc++: Automated Open Source Vulnerability Discovery - Make it stand outFigure 1.2: Semgrep Code has regex-like functionality for matching and filteringhttps://www.somersetrecon.com/blog/2024/automated-bug-hunting-with-semgrepmonthly0.52024-08-26https://www.somersetrecon.com/blog/2024/6/5/reversing-the-unicornmonthly0.52024-06-14https://www.somersetrecon.com/blog/2022/hacking-the-furbo-dog-camera-part-iiimonthly0.52022-12-08https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/95af2f6b-c171-4939-9e96-065639349a08/image2.pngBlog - Hacking the Furbo Dog Camera: Part III Fun with Firmware - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/205b39b0-47c1-412c-9a2d-c62d71937563/image6.pngBlog - Hacking the Furbo Dog Camera: Part III Fun with Firmware - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/bfa1c2a8-6646-42b0-bf05-c8828d6c6ab3/image14.pngBlog - Hacking the Furbo Dog Camera: Part III Fun with Firmware - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/e987a2c7-933c-4ec8-8651-7ce017e11143/image7.pngBlog - Hacking the Furbo Dog Camera: Part III Fun with Firmware - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/ecaa6ce2-e75f-4ae1-8bd7-3264ed5f3277/image5.pngBlog - Hacking the Furbo Dog Camera: Part III Fun with Firmware - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/9eb1a4e9-5832-4c05-93cc-551faa65440d/image1.pngBlog - Hacking the Furbo Dog Camera: Part III Fun with Firmware - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/6d3c1662-0b2f-4062-9951-6aa020e16e83/image11.pngBlog - Hacking the Furbo Dog Camera: Part III Fun with Firmware - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/6711b910-7804-4cd6-8a4c-24c4ebfbc33a/image15.pngBlog - Hacking the Furbo Dog Camera: Part III Fun with Firmware - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/5688d311-3017-469c-ad55-dea8e6edf8d9/image9.pngBlog - Hacking the Furbo Dog Camera: Part III Fun with Firmware - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/4c0581dc-1bae-4d78-981b-dd9d6b8f123f/image13.pngBlog - Hacking the Furbo Dog Camera: Part III Fun with Firmware - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/74d7ccd8-14d2-41b4-ad6d-48132325ce1f/image10.pngBlog - Hacking the Furbo Dog Camera: Part III Fun with Firmware - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://www.somersetrecon.com/blog/fuzzing-for-cves-part-i-local-targetsmonthly0.52024-08-17https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/6c6a56a9-2293-4539-96f9-544ba003e1c6/Screen+Shot+2022-10-13+at+1.41.19+PM.pngBlog - Fuzzing for CVEs Part I (Local Targets) - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/19a78326-cd02-41f4-8faf-419240c41ee0/my\_c.pngBlog - Fuzzing for CVEs Part I (Local Targets) - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/12b7d422-b1c4-4cd6-9853-c280150018d3/Screen-Shot-2022-06-30-at-4.37.18-PM.pngBlog - Fuzzing for CVEs Part I (Local Targets) - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/40105a0b-5b25-4a4b-bcea-cc73de8eea71/aflpp\_bg-768x769\_1\_50.pngBlog - Fuzzing for CVEs Part I (Local Targets) - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/75f3e228-df45-4334-b8a9-90567e319556/afl\_plus\_plus\_install\_kali.pngBlog - Fuzzing for CVEs Part I (Local Targets) - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/55b30fdf-5b56-419d-be44-db316519bf02/md2roff\_compile\_AFL.pngBlog - Fuzzing for CVEs Part I (Local Targets) - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/81883052-c70d-4dc0-801d-f89104340890/mkdir\_input\_output.pngBlog - Fuzzing for CVEs Part I (Local Targets) - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/cc4d2f88-db9c-4bbb-b061-968f216adb0e/afl\_sample\_input-1.pngBlog - Fuzzing for CVEs Part I (Local Targets) - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/5cca5449-3c53-4f19-a434-50ffc9e19ac8/start\_afl.pngBlog - Fuzzing for CVEs Part I (Local Targets) - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/ffcd0a71-261d-4504-b2fc-261ca9e7a45c/afl-fuzz.pngBlog - Fuzzing for CVEs Part I (Local Targets) - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/cfa4dfd8-cd1c-4575-accb-a5d881bd552f/Screen-Shot-2022-06-30-at-5.55.04-PM.pngBlog - Fuzzing for CVEs Part I (Local Targets) - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/e0aac333-fe40-426c-b68c-fc5a57d7ad4b/Screen-Shot-2022-06-30-at-5.55.43-PM.pngBlog - Fuzzing for CVEs Part I (Local Targets) - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/6aae300e-ee31-4f2e-8588-af3be1ae46ec/vuln\_md\_file.pngBlog - Fuzzing for CVEs Part I (Local Targets) - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/8f3f7359-1377-4bad-ba71-0806d7024ace/segfault.pngBlog - Fuzzing for CVEs Part I (Local Targets) - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/186a1445-2bd7-4316-9686-617204e344f8/gdb\_registers.pngBlog - Fuzzing for CVEs Part I (Local Targets) - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://www.somersetrecon.com/blog/2021/hacking-the-furbo-dog-camera-part-iimonthly0.52021-10-12https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1630603797341-BCJ6DTIEK9V6VX1ITPAU/nmap\_results.pngBlog - Hacking the Furbo Dog Camera: Part II - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1630604753579-55EGI5H38KKBOEZ0NQYP/stickers\_combo.pngBlog - Hacking the Furbo Dog Camera: Part II - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1631562650227-1TWS54OU0H2AW8S2AXTY/furbo.jpgBlog - Hacking the Furbo Dog Camera: Part II - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1630605616198-N3E8RBGGBFR2FRQ1YZXN/teardown\_assembled.jpgBlog - Hacking the Furbo Dog Camera: Part II - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1630606730450-2E7SPSKPWRVF9AL1CYGW/2.5t\_auth\_dialog.pngBlog - Hacking the Furbo Dog Camera: Part II - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1630607109503-CQR0ID27WCJAQ8DLNGU0/modify\_realm.pngBlog - Hacking the Furbo Dog Camera: Part II - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1630607180892-XFTB40FCBJ1IUXQ005FT/Screen+Shot+2021-05-05+at+2.06.19+PM.pngBlog - Hacking the Furbo Dog Camera: Part II - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1630607213642-PMYLEBTTON7L103TFPKF/ambarella\_http\_ldc.pngBlog - Hacking the Furbo Dog Camera: Part II - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1630609014794-JDBUFRPQ0D13IBW2SUNM/normal\_req.pngBlog - Hacking the Furbo Dog Camera: Part II - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1630609039567-9HWISOFGR9ZD95IEXI6S/normal\_resp.pngBlog - Hacking the Furbo Dog Camera: Part II - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1630609071853-KPUEVUA1G56LXXXKRRBV/cmd\_inj\_req.pngBlog - Hacking the Furbo Dog Camera: Part II - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1630609090089-6ETHYES4UKQNUU23C21H/cmd\_inj\_response.pngBlog - Hacking the Furbo Dog Camera: Part II - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1630611049767-6KS6UYWDKPTSHN3Y5PH0/cmd\_inj\_ghidra.pngBlog - Hacking the Furbo Dog Camera: Part II - Make it stand outWhatever it is, the way you tell your story online can make all the difference.https://www.somersetrecon.com/blog/2021/hacking-the-furbo-part-1monthly0.52021-04-26https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1618444994807-2H8B1OWU3S4NDEF49NC9/DSC\_0773.JPGBlog - Hacking the Furbo Dog Camera: Part Ihttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1618446490073-AGOJQCB8J1WSQMQAP5GZ/DSC\_0550.jpgBlog - Hacking the Furbo Dog Camera: Part Ihttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1618447461579-AOCK80Q38IIBRGWBYIPD/DSC\_0592\_brighter.jpgBlog - Hacking the Furbo Dog Camera: Part Ihttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1618448455486-XRGF1229ZAL1OLUOQW4L/DSC\_0577.jpgBlog - Hacking the Furbo Dog Camera: Part Ihttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1618448562010-Q36MIJSIPJFIJN4XLGBH/DSC\_0583.jpgBlog - Hacking the Furbo Dog Camera: Part Ihttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1618450140952-FM4ELVLO1G1L4JPERBYN/DSC\_0583\_lines.pngBlog - Hacking the Furbo Dog Camera: Part Ihttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1618453175802-AOI92SY1F6WNXCSK2KO7/500\_As\_gdb.pngBlog - Hacking the Furbo Dog Camera: Part Ihttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1618453452414-T3DR64XXBX7MSAJHAGGQ/bo\_watin\_for\_shellz.JPGBlog - Hacking the Furbo Dog Camera: Part Ihttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1618454595926-ZIIFYWNZT74VWMUJGAKV/aslr\_shell.pngBlog - Hacking the Furbo Dog Camera: Part Ihttps://www.somersetrecon.com/blog/2019/8/5/layerone-2019-ctf-log-viewermonthly0.52019-08-16https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565054547957-89KRH5O0ZQGLM3N2PBAC/image7.pngBlog - LayerOne 2019 CTF - LogViewerhttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565128530504-UXJTGAWQQIYP1Y506ISM/image14.pngBlog - LayerOne 2019 CTF - LogViewerhttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565128651994-ZHO15BFIUC6MD1K9Y5Q9/image1.pngBlog - LayerOne 2019 CTF - LogViewerhttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565128793877-EI0M190B88ZQYFF3MFYQ/image5.pngBlog - LayerOne 2019 CTF - LogViewerhttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565132323234-7OQDQS80OZV2DZ1H2M1N/image11.pngBlog - LayerOne 2019 CTF - LogViewerhttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565132373518-MX24IZBGSRT9UZI4X4IY/image-asset.pngBlog - LayerOne 2019 CTF - LogViewerhttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565132394131-9JOQJYR0D4N7Y8VSAFUI/image-asset.pngBlog - LayerOne 2019 CTF - LogViewerhttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565191658642-TDYY23193FIESJ1SMG19/image2.pngBlog - LayerOne 2019 CTF - LogViewerhttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565191702687-0BJ5KUJUFTQ1Q27V9P2T/image10.pngBlog - LayerOne 2019 CTF - LogViewerhttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565191744287-UOFDA41X395V27QVXR9S/image-asset.pngBlog - LayerOne 2019 CTF - LogViewerhttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565191817376-K300GI6G6K8PXXLUFUOO/image-asset.pngBlog - LayerOne 2019 CTF - LogViewerhttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565193416201-Z3RHPU5XFH3T8ZGM8NH4/image-asset.pngBlog - LayerOne 2019 CTF - LogViewerhttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565193461295-I68KZC8PNA1IF4LRINZW/image-asset.pngBlog - LayerOne 2019 CTF - LogViewerhttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565193553505-XAVTSW4V3FBDHNAFKJH4/image-asset.pngBlog - LayerOne 2019 CTF - LogViewerhttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565193651300-VEAP51QIEMPW9Q8KWZGX/image-asset.pngBlog - LayerOne 2019 CTF - LogViewerhttps://www.somersetrecon.com/blog/2019/ghidra-plugin-development-for-vulnerability-research-part-1monthly0.52019-08-16https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1554153375763-894GHUISYKN43KKGD718/image-asset.gifBlog - Ghidra Plugin Development for Vulnerability Research - Part-1https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1554154177487-KO61ARHUDH1MI5AM6AEQ/image-asset.gifBlog - Ghidra Plugin Development for Vulnerability Research - Part-1https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1554154655281-ONSHXI9DA4S5VLTAHOGJ/image-asset.gifBlog - Ghidra Plugin Development for Vulnerability Research - Part-1https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1554155685053-HJMDFJ2U2V7KERPY1EAB/ghidra\_output4.pngBlog - Ghidra Plugin Development for Vulnerability Research - Part-1https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1554155536446-COL0DKS6EXYFC3ZN93K8/image-asset.gifBlog - Ghidra Plugin Development for Vulnerability Research - Part-1https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1554155764255-44AM1UDHK5OINH2WQQYI/ghidra\_output6.pngBlog - Ghidra Plugin Development for Vulnerability Research - Part-1https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1554155826476-DCDCS5YIJ4JD76BJWHU6/ghidra\_output7.pngBlog - Ghidra Plugin Development for Vulnerability Research - Part-1https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1554155953691-F524GFA87ZMYC0FQIONX/ghidra\_output8.pngBlog - Ghidra Plugin Development for Vulnerability Research - Part-1https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1554443873267-YEITLQMU8Y53PJ1445WK/ghidra\_output9.pngBlog - Ghidra Plugin Development for Vulnerability Research - Part-1https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1554156116646-DZDOWP8SRLUO8J7C6Y8E/ghidra\_output9.pngBlog - Ghidra Plugin Development for Vulnerability Research - Part-1https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1554156205095-JTQUAMAA5TK30R9K1M28/ghidra\_output10.pngBlog - Ghidra Plugin Development for Vulnerability Research - Part-1https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1554320077275-VA5CR62LWJDND71JR32R/ghidra\_output15.pngBlog - Ghidra Plugin Development for Vulnerability Research - Part-1https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1554156281322-7OTS5UWS7QUP7KXJ17YF/ghidra\_output11.pngBlog - Ghidra Plugin Development for Vulnerability Research - Part-1https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1565995069082-PPSVF1MQ5D0O0GGKKGHV/ghidra\_output12.pngBlog - Ghidra Plugin Development for Vulnerability Research - Part-1https://www.somersetrecon.com/blog/2018/8/2/idapython-part-2monthly0.52018-11-20https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1533230452771-9F96PZR471CINHYH6QXJ/blog\_1.pngBlog - Introduction to IDAPython for Vulnerability Hunting - Part 2Example of inlined strcpy() - Disassembly on left, HexRays decompiled version on righthttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1533230410558-ITM1PUMS9944LVZ3AH7J/blog\_2.pngBlog - Introduction to IDAPython for Vulnerability Hunting - Part 2Output of Script Against EQNEDT32.exehttps://www.somersetrecon.com/blog/2018/7/27/infecting-the-embedded-supply-chainmonthly0.52018-08-14https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1532704637868-PBXQ5YBYQNQLD8B729BG/blog\_1.pngBlog - Infecting the Embedded Supply ChainFormat String Vulnerability Demonstrationhttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1532704710257-LZKOUROOWCFFUB5M6HLP/blog\_2.pngBlog - Infecting the Embedded Supply ChainHex-Rays Output of the Source of the Vulnerabilityhttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1532704798560-XUBP7WVFFKVEQ1965IY3/blog\_3.pngBlog - Infecting the Embedded Supply ChainException Thrown when Reading Memory "AAAA"https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1532704895677-LTBX0O2ZW284V6ILMY90/blog\_4.pngBlog - Infecting the Embedded Supply ChainHex-Rays Output Showing the Creation of a Telnet Server Threadhttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1533327983074-7YRFUQICHHRL9XJXQCIL/j\_link\_serial\_number.jpgBlog - Infecting the Embedded Supply ChainSegger Serial Number Divided into Sectionshttps://www.somersetrecon.com/blog/2018/7/25/game-hacking-hammerwatch-invincibilitymonthly0.52018-08-06https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1532551366005-TIC4HTCM9C6I40KQUCSR/blog\_image\_2.pngBlog - Game Hacking: Hammerwatch InvincibilityDnspy Provides the Full Decompiled Sourcehttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1532551540053-7F9PD8WC9L469OYPRU2Y/blog\_image\_3.gifBlog - Game Hacking: Hammerwatch InvincibilityInvincibility Cheat in Effect. Left-side is what the cheater sees, and the Right-side is what the other players seehttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1532551649163-GIJKBH05BSEHJA5PL8OH/blog\_image\_4.gifBlog - Game Hacking: Hammerwatch InvincibilityRainingDeath Custom Attack in Effect - Left-side is what the cheater sees, Right-side is what the other players seehttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1532551183764-T2E0NN7XBPTPEM0AC8BG/image\_1.gifBlog - Game Hacking: Hammerwatch InvincibilityThe End Result: Playing Hammerwatch using Invincibility Mode, Unlimited Mana Mode, and a Custom Multi-Arrow Spin Attackhttps://www.somersetrecon.com/blog/2018/7/6/introduction-to-idapython-for-vulnerability-huntingmonthly0.52018-07-12https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1530919824456-J9VEZP9JXLP5CNXRQEW3/vrblog\_fig1\_get\_func\_names.pngBlog - Introduction to IDAPython for Vulnerability Huntinghttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1530920915955-8I2KHL9XD16Y77M2ZQ1L/vrblog\_fig2\_strcpy\_calls.pngBlog - Introduction to IDAPython for Vulnerability Huntinghttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1530920996839-G9PFEGTSL25HT80PJJKH/vrblog\_fig3\_function\_call.pngBlog - Introduction to IDAPython for Vulnerability Huntinghttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1530921803226-5ZOFTKO5IXVFLUAVONNJ/vrblog\_fig4\_output.pngBlog - Introduction to IDAPython for Vulnerability Huntinghttps://www.somersetrecon.com/blog/2018/5/2/gameon-competition-and-abusing-scada-hmi-project-filesmonthly0.52018-05-02https://www.somersetrecon.com/blog/2016/10/14/electronic-safe-lock-analysis-part-2-monthly0.52016-12-13https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1480635627918-JF0A5MM2NL68FLMSRXP7/image-asset.pngBlog - Electronic Safe Lock Analysis: Part 2Figure 1: Wireshark capturing Bluetooth traffic with wardriving filterhttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1480635830270-01KK45XZSHZP5S6QKYGZ/image-asset.pngBlog - Electronic Safe Lock Analysis: Part 2Figure 2: Bluetooth application payload containing the receiver MAC address (pink), sender MAC address (cyan), PIN (green), and open time (blue)https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1480635871000-ZS5APDHF7CDVRKEZAKWK/image-asset.pngBlog - Electronic Safe Lock Analysis: Part 2Figure 3: PIN in hexadecimal formathttps://www.somersetrecon.com/blog/2016/6/7/electronic-safe-lock-analysis-part-1-teardownmonthly0.52016-06-21https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1465337871864-DKH9XF0CQ5JMAS0S5KY4/image-asset.jpegBlog - Electronic Safe Lock Analysis: Part 1 - Teardownhttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1465323695410-3XYYEF5M3IEHR01LPH6K/image-asset.jpegBlog - Electronic Safe Lock Analysis: Part 1 - TeardownFront side of the entry pad circuit board shows power connections for a 9V battery and a 10-pin debugging interface (J1).https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1465324097537-O5BKH03VM4D70L8PGK0N/image-asset.jpegBlog - Electronic Safe Lock Analysis: Part 1 - TeardownBack side of the entry pad is where the board’s main MCU, a Renesas μPD78F0515A (U1), can be found. It’s accompanied with an NXP QN902X SoC (U6) for BLE communication. Peripherals, such as the 8-pin keypad header (P1) and 4-pin serial interface (P3; ref above) to the lock-body are also located on this side. This serial interface is both used for communication and to carry power to the lock body. There are unpopulated footprints (U2, U4, BAT1), which may have been used in previous revisions of this board, for debugging purposes, or other models of this entry pad.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1465324238498-2IQM5Z9LDCA0VDHTXB5Q/image-asset.jpegBlog - Electronic Safe Lock Analysis: Part 1 - TeardownFront side of the lock body circuit board uses a less featureful Renesas μPD78F9234 MCU (U1). It is only known to communicate with a entry pad over the wired 4-pin serial communication interface (JP1), but there is another serial interface (JP2) adjacent to it that is hidden by the lock body cover. Additionally hidden is a 2-pin connector (P1) that is tied to pin 14 on the MCU. Its purpose is still undetermined.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1465324429747-JQ0DG1TO8NO7HGDXA9D5/image-asset.jpegBlog - Electronic Safe Lock Analysis: Part 1 - TeardownBack side of the lock body reveals another 8-pin debugging interface (J1; under sticker) and the hardware reset button (SW1). The reset button allows the lock body and entry pad to “relink” if the devices were to somehow fall out of sync with each other. The reset button is also used when connecting a preconfigured lock body with a new entry pad.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1465324535365-H0L8U001GSIFMVSI5GM7/image-asset.jpegBlog - Electronic Safe Lock Analysis: Part 1 - TeardownThe lock body is the only mechanical part of the system. It is composed of a DC motor and bolt. If 5 volts is applied across the red and yellow wires shown, the DC motor will retract the bolt and allow the security container to be opened.https://www.somersetrecon.com/blog/2016/1/21/hello-barbie-security-part-2-analysismonthly0.52016-01-25https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1453416368467-H8HMIJAGAQ600XDLN6AR/image-asset.pngBlog - Hello Barbie Security: Part 2 - Analysishttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1453416426692-1RENPEFKA259EVPUUWO6/image-asset.pngBlog - Hello Barbie Security: Part 2 - Analysishttps://www.somersetrecon.com/blog/2015/11/20/hello-barbie-security-part-1-teardownmonthly0.52015-11-21https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1448058902622-YNSOINIKZ2S3VPBBTBZ7/image-asset.jpegBlog - Hello Barbie Security: Part 1 - Teardownhttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1448059099036-L1T68FGQO62QBPR8BGG0/image-asset.jpegBlog - Hello Barbie Security: Part 1 - TeardownHello Barbie main circuit board. Front side. Showing Wi-Fi module, flash memory, audio codec, and debugging headers.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1448059139546-14BP22NYD8AQ1B0MML2P/image-asset.jpegBlog - Hello Barbie Security: Part 1 - TeardownHello Barbie main circuit board. Back side. Showing LEDs, test points, and main button.https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1448059741836-40XKV9WSOSSP3IRTOGGQ/image-asset.pngBlog - Hello Barbie Security: Part 1 - TeardownScreenshot of firmware being dumped from Barbie's flash memory.https://www.somersetrecon.com/blog/tag/Barbiemonthly0.5https://www.somersetrecon.com/blog/tag/IDA+Promonthly0.5https://www.somersetrecon.com/blog/tag/IDAmonthly0.5https://www.somersetrecon.com/blog/tag/AFLmonthly0.5https://www.somersetrecon.com/blog/tag/Firmware+Exploitationmonthly0.5https://www.somersetrecon.com/blog/tag/IDAPythonmonthly0.5https://www.somersetrecon.com/blog/tag/CVE-2022-36752monthly0.5https://www.somersetrecon.com/blog/tag/Reverse+Engineeringmonthly0.5https://www.somersetrecon.com/blog/tag/Furbo+Update+MiTMmonthly0.5https://www.somersetrecon.com/blog/tag/Zero-Daymonthly0.5https://www.somersetrecon.com/blog/tag/IoTmonthly0.5https://www.somersetrecon.com/blog/tag/Vulnerability+Analysismonthly0.5https://www.somersetrecon.com/blog/tag/CVE-2022-34913monthly0.5https://www.somersetrecon.com/blog/tag/Keurigmonthly0.5https://www.somersetrecon.com/blog/tag/Hardware+Hackingmonthly0.5https://www.somersetrecon.com/blog/tag/CVE-2022-34556monthly0.5https://www.somersetrecon.com/blog/tag/Teardownmonthly0.5https://www.somersetrecon.com/blog/tag/Hello+Barbiemonthly0.5https://www.somersetrecon.com/blog/tag/Fuzzingmonthly0.5https://www.somersetrecon.com/blog/tag/Ghidramonthly0.5https://www.somersetrecon.com/blog/tag/CVE-2022-41220monthly0.5https://www.somersetrecon.com/blog/tag/Semgrepmonthly0.5https://www.somersetrecon.com/blog/tag/Pluginmonthly0.5https://www.somersetrecon.com/homedaily1.02016-01-23https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1415297928596-WBZ6W5LW7SRV88S73VPI/image-asset.jpegHomePhoto by Nirian/iStock / Getty Imageshttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1415298035990-S2PADFGJX9BGMKYL0PCR/image-asset.jpegHomePhoto by Miha Peroša/iStock / Getty Imageshttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1415298153992-CLH3VYD9HBX7EZ7BBNA7/image-asset.jpegHomePhoto by uchar/iStock / Getty Imageshttps://www.somersetrecon.com/servicesdaily0.752016-02-25https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1415298940687-2XURUXW19HI85QSANW4U/image-asset.jpegServicesPhoto by DustyPixel/iStock / Getty Imageshttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1415298987846-E7STH816K3TIKSIAFLOY/image-asset.jpegServicesPhoto by Robert Churchill/iStock / Getty Imageshttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1415299049756-AAQ44SWWUXTECLSCA14L/image-asset.jpegServicesPhoto by Image Source/Stockbyte / Getty Imageshttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1415299120809-BH7OJNUDJP9IAPYP2FYO/image-asset.jpegServicesPhoto by User9637786_380/iStock / Getty Imageshttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1415299218341-WDON1E2N5006NUY90HVZ/image-asset.jpegServicesPhoto by Purestock/Purestock / Getty Imageshttps://www.somersetrecon.com/contactdaily0.752014-12-02https://www.somersetrecon.com/industriesdaily0.752016-04-29https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1415300716831-YZOJIQER0QXPWYHBZQ6G/image-asset.jpegIndustrieshttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1415298603871-FR3QJ2H8IVL6X84CT7VL/image-asset.jpegIndustriesPhoto by Chesky_W/iStock / Getty Imageshttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1415298699830-LF4BCOMS56D1X7DAIS0C/image-asset.jpegIndustriesPhoto by plusphoto/amanaimagesRF/amana images / Getty Imageshttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1415298763025-EVGL28DGKCUOYZYKI98X/image-asset.jpegIndustriesPhoto by Gregory_DUBUS/iStock / Getty Imageshttps://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1461968895573-0AUVVWI3WLIXCPI26349/image-asset.jpegIndustrieshttps://www.somersetrecon.com/aboutdaily0.752016-02-25https://images.squarespace-cdn.com/content/v1/543effd8e4b095fba39dfe59/1453592989422-MP6AEHCICDVLDELWYE96/image-asset.jpegAboutPhoto by sezer66/iStock / Getty Imageshttps://www.somersetrecon.com/careersdaily0.752022-07-07https://www.somersetrecon.com/careers/pen-testerdaily0.752021-06-29https://www.somersetrecon.com/embedded-security-professionaldaily0.752021-06-29https://www.somersetrecon.com/account-managerdaily0.752021-06-29
