PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Diving into Starlink's User Terminal Firmware

blog.quarkslab.com | research | #reverse-engineering | #firmware | #iot | #embedded | #starlink | #spacex
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

An overview of Starlink's User Terminal runtime internals — device firmware layout, internal communications with user applications, and tools released to support further research.
Published
Collected

Related coverage

blog · blog.viettelcybersecurity.com
Lỗ hổng điều khiển các thiết bị SmartHome Lumi
Researcher analyzes Lumi smart home devices, finding hardcoded MQTT credentials in firmware and weak controls that let attackers manipulate lights and locks via local Wi-Fi or the cloud.
blog · blog.viettelcybersecurity.com
Research IOT - Analyze Bootloader - notBootSecure
A researcher reverse engineers an encrypted Hikvision camera firmware, using UART access to dump the bootloader and recover the decryption key, a practical guide to IoT firmware extraction.
blog · projectzero.google
Over The Air: Exploiting Broadcom’s Wi-Fi Stack (Part 1)
Part one of Project Zero's Over The Air series, turning attention from application processors to Wi-Fi chips and finding flaws in Broadcom's widely used Wi-Fi stack.
research · blog.quarkslab.com
A modern tale of blinkenlights
Quarkslab extracts a €12 smartwatch's firmware using a modern variant of a 2000s hardware attack with cheap, robust tooling; the JieLi-based watch lacks real health sensors.
research · blog.quarkslab.com
Bluetooth Low Energy GATT Fuzzing
Quarkslab presents a fuzzer for the Bluetooth Low Energy GATT/ATT layers, built around attack scenarios from an in-depth spec study; it uncovered bugs and vulnerabilities across several BLE stacks.
research · blog.quarkslab.com
Breaking Secure Boot on the Silicon Labs Gecko platform
Vulnerability research on Silicon Labs' Gecko Bootloader: an OTA parser flaw in the open-source Gecko SDK that breaks Secure Boot and affects connected devices built on the platform.
Back