PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

‘One challenging thing about Bug Bounty is when it’s black box’: sunshinefactory on bug hunting, CTFs and hardware hacking

yeswehack.com | blog | #bug-bounty | #ctf | #hardware-security | #reconnaissance | #security-community | #reverse-engineering | #hardware-hacking | #interview | #iot-security
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

YesWeHack interviews sunshinefactory (Yuewei Wu), part of the winning team at the SPIRITCYBER hardware contest, on IoT hacking methodology, CTF versus bug bounty, and career advice.
Published
Collected

Related coverage

tool · github.com
gpu-unlock-ada: Linux Kernel Module Unlocking Tensor Core Limits on RTX 40-Series GPUs
Demonstrates how reverse-engineering GPU firmware handoff sequences and hardware registers can bypass artificial consumer hardware compute limits without flashing custom VBIOS, significantly accelerating local AI workloads.
research · eshard.com
Guest article: solving a flare-on challenge with esReven
We use esReven to solve the final challenge in last year's Flare-on reverse-engineering CTF.
research · eshard.com
PicoCTF: Power Analysis Challenges
Write-ups for three challenges of the PicoCTF 2023. These challenges are a series on side-channel power analysis using estraces & scared packages from github.
research · eshard.com
PicoCTF: SRA Challenge
Write-up for SRA challenge of the PicoCTF 2023. These challenge is part of the Cryptography category.
research · eshard.com
Hack Trick": DG'hAck CTF 2022 write-up
See esReven in action against an obfuscated malware sample. This walkthrough covers defeating anti-VM measures, analyzing DeviceIoControl calls, and patching memory to recover a corrupted registry flag.
research · eshard.com
“La fonte des hashs”: 404CTF write-up
# pattern to match a byte byte_pattern = re.compile(r'[a-zA-Z0-9]{2}') def match_header_size(str_byte_1, str_byte_2): byte_list_1 = byte_pattern.findall(str_byte_1) byte_list_2 =...
Back