PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Research IOT - Analyze Bootloader - notBootSecure

blog.viettelcybersecurity.com | blog | #reverse-engineering | #firmware | #iot | #uart | #bootloader | #hikvision
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A researcher reverse engineers an encrypted Hikvision camera firmware, using UART access to dump the bootloader and recover the decryption key, a practical guide to IoT firmware extraction.
Published
Collected

Related coverage

blog · blog.viettelcybersecurity.com
Lỗ hổng điều khiển các thiết bị SmartHome Lumi
Researcher analyzes Lumi smart home devices, finding hardcoded MQTT credentials in firmware and weak controls that let attackers manipulate lights and locks via local Wi-Fi or the cloud.
vulnerability · eshard.com
Time Travel Analysis with QEMU on IoT Targets: Not Always That Hard - Part II
Adding a missing USB Ethernet peripheral to QEMU to unlock Time Travel Debugging on unmodified Raspberry Pi 3B+ firmware.
vulnerability · eshard.com
Time Travel Analysis with QEMU on IoT Targets: Not Always That Hard - Part I
Learn how to emulate IoT firmware in QEMU, reproduce CVE‑2019‑14192 in U‑Boot, and capture a Time Travel Analysis trace—all without real hardware.
research · eshard.com
MCUBoot Under (good) Pressure | Part 1: Walk Around the Code
Software Security ### Power your investigations with esReverse ✨ Keep your data safe with private LLM. PLATFORM esReverse AI-powered Reverse Engineering TOOLS Time Travel Debugging Epoch SERVICES...
blog · blog.viettelcybersecurity.com
Cuộc chiến White Box và Black Box trong truy tìm lỗ hổng bảo mật ở thiết bị IoTs
Two researchers independently found auth-bypass flaws ZDI-20-1176 and ZDI-20-1451 in NETGEAR's mini_httpd; the post compares their white-box source analysis and black-box approaches.
blog · blog.viettelcybersecurity.com
Tồn tại lỗ hổng 5 năm không thể vá trên CPU và chipset Intel
Positive Technologies found an unpatchable flaw in Intel's CSME firmware ROM: a DMA window before memory protections enable could let attackers hijack the engine and break the platform trust chain.
Back