PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Hacking Millions of Modems (and Investigating Who Hacked My Modem)

samcurry.net | blog | #cloud | #network-security | #digitalocean | #traffic-interception | #investigation | #isp | #modem
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

After every HTTP request from his network got intercepted and replayed by a DigitalOcean IP in seconds, Sam Curry investigates who hacked his modem—and why millions of modems are at risk.
Published
Collected

Related coverage

blog · blog.viettelcybersecurity.com
Một số kiểu tấn công vào hạ tầng mạng ISP và giải pháp phòng chống tấn công
An overview of attacks targeting ISP infrastructure, covering DDoS, IP spoofing, route leaking and BGP hijacking, illustrated by the 2016 Mirai attack on Liberia's national internet.
blog · netspi.com
IP Traceback: Has Its Time Arrived?
In simple terms, IP traceback allows for the reliable identification of the source of IP traffic, despite techniques such as IP spoofing.
blog · portswigger.net
[MoBP] Invisible proxying
Invisible proxying lets Burp accept non-proxy-style requests, deriving the destination from the Host header or a configured forwarding target — useful for thick clients that ignore proxy settings.
blog · blog.quarkslab.com
Overview of Passive Optical Networks (PONs) Security
Passive Optical Networks (PONs) connect end-users to infrastructure using optical fibre in the last kilometre (Fibre-to-the-x). This article provides a technical overview of the security features in ITU-T specifications: Gigabit-capable PON (GPON), 10-Gigabit-capable PON (XG-PON), 10-Gigabit-capable Symmetric PON (XGS-PON), Next-generation PON 2 (NG-PON2), and 50-Gigabit-capable PON (50G-PON). The analysis covers authentication schemes, key derivation, encryption methods, and associated security implications.
blog · bugcrowd.com
The power of TikTokers: Why everyday internet sleuths are OSINT experts
TikTok and Reddit users now rival professional investigators at OSINT, geolocating photos and exposing false brand claims through persistence and curiosity rather than specialized tools.
blog · bugcrowd.com
What a Netflix documentary taught us about the power of open-source intelligence
OSINT engineer Polem4rch frames open-source intelligence as detective work across photos, emails, and nicknames, recounting how it helped him win Argentina's Ekoparty 2024 Social Engineering CTF.
Back