Sofia, Bulgaria
Joined April 2010
Implemented k-Anonymity query API to #wpasec. Use it online or offline to detect if network credentials were leaked. Can't wait to see what people will integrate it with. Details: github.com/RealEnder/dwpa/bl…
3
1
11
660
RealEnder retweeted
hashcat v8.0.0 released! The largest update in the history of hashcat, with PCFG attacks, hash recipes that crack hashes without a hash-mode, and bcrypt on FPGA boards. Release notes: github.com/hashcat/hashcat/b… Download: hashcat.net/hashcat/
24
420
33
2,021
91,843
RealEnder retweeted
My presentation at Hexacon is done ! Time for public disclosure. Pictured below: remote unauthenticated code execution over-the-air (including the shell) on Proximus BBOX 3V+
6
57
4
269
16,344
RealEnder retweeted
We just got a root shell on a @Starlink terminal antenna! To our knowledge, this is the first full exploit of a "square dish" since @LennertWo's attack on the "circular" one in 2021. @SpaceX security team has done an amazing job, leaving us no choice but a *hardware attack* to achieve this 👏 The demo below shows what's only possible on actual rooted hardware: reading fuse register contents, accessing hardware-encrypted "file_edr" data, and more.
19
141
15
1,001
113,079
Glad to be part of team #HashmobPro! Congrats on the 1st place in the @defcon 34 @CrackMeIfYouCan competition! You rock, guys! 🤘
2
2
5
322
RealEnder retweeted
Hot take, offline computed cracking * Connected to WPA-SEC API * Validation of handshake / PMKID * Potfile download support * Import of AP information / passwords * Connected to other features as-well Thanks to @RealEnderSec / WPA-SEC for the work and allowance 💪
3
3
19
1,001
I "ported" @hashcat to the GBA, the ultimate password cracking rig ever (my dumbest project yet). The monstrously powerful 16.78 MHz ARM7TDMI chip does an astronomical 727 SHA256 hashes per second!! which is about thirty million times slower than a modern cracking rig. 350 days of continuous cracking on this bad boy could be done in about 1 second with a modern GPU-accelerated cracking rig.
79
144
19
1,902
133,471
RealEnder retweeted
Please help us verify a WiFi chip for Flipper One. We chose the Mediatek MT7921AU as Flipper One’s built-in Wi-Fi chip because it’s the most advanced hacker-friendly chipset we could find. It supports 2.4/5/6 GHz operation, monitor mode, packet injection, and has an open-source driver in the mainline Linux kernel. The Alfa AWUS036AXML has the same chipset. However, we couldn’t make a few basic features work: ∙Simultaneous client (STA) and hotspot (AP) modes (for example, to proxy a paid Wi-Fi network). ∙Dual-band AP on 2.4 GHz and 5 GHz at the same time (to create a highly-compatible Wi-Fi hotspot). The datasheet and driver data contradict each other, and it seems that these features must work. We don’t understand whether we're hitting software or hardware limitations. So we ask for your help. Our Wi-Fi module specifications: docs.flipper.net/one/hardwar…. To participate in testing, edit this page: docs.flipper.net/one/testing…. #FlipperHelpWanted
22
39
3
576
52,305
RSA private keys biased toward 0 bits can be factored by swapping a hard math problem for an easy one: integer factorization becomes polynomial factorization. We found hundreds of real-world keys vulnerable to this. Many traced to a type mismatch in CompleteFTP (now patched): each 32-bit limb got only 8 bits of randomness. We recovered 603 RSA and 74 DSA private keys. blog.trailofbits.com/2026/06…
9
162
7
797
52,248
RealEnder retweeted
$443,000+ raised on Proxmark5! Huge thank you to everyone supporting the next-gen RFID research platform. Goal smashed in minutes, Iceman Keychain unlocked, and we’re closing in fast on the $600k Transparent PCB Namecard stretch goal. Only ~27 days left at early-bird pricing. indiegogo.com/projects/rfidr… #Proxmark #flipperzero
1
14
2
62
4,229
Не съм вярвал, че някога ще кажа добра дума за нещо държавно! еЗдраве било хубаво и функционално приложение. Даже и детето е вътре по дефолт. Имаме нужда от още такива инструменти и институции! Амин! Честит петък!
4
4
1
58
2,180
RealEnder retweeted
We found that Wi-Fi client isolation can often be bypassed. This allows an attacker who can connect to a network, either as a malicious insider or by connecting to a co-located open network, to attack others. NDSS'26 paper: ndss-symposium.org/wp-conten… GitHub: github.com/vanhoefm/airsnitc…
20
246
14
1,430
204,044
RealEnder retweeted
4
18
8
214
15,252
Power surge brought #wpasec down. Now dealing with hardware failures and assessing damages. Hope will return online soon, bit don't hold your breadth.
3
5
383
And we're back online. Thanks to our handheld vacuum cleaner adapter, which now powers the core router :)
1
7
294
RealEnder retweeted
Despite having one of the most transparent and well-managed funding structures among all open-source foundations, the ZSF hasn’t reached its goal and could use some help too: ziglang.org/news/2025-financ…
5
1
23
3,375
Really hits me to read about Conrad Rockenhaus. Guy takes blow after blow just to keep a Tor exit node clean of surveillance. That’s grit, that’s backbone - the kind of thing hacker culture used to be about. And yet .. somewhere along the way we started cheering for all the wrong people. Heads of agencies that spied on us suddenly get invited on stage at our cons. Some industry “idols” are basically psychopaths with zero ethics, but they still get put on a pedestal. Meanwhile, the people who actually take the hits for us stay in the shadows. Glad VX-Underground shared his story - at least more people now know his name. That’s the kind of moral compass and resistance I thought this community was built on.
Big drama today in the Tor community. Conrad Rockenhaus, a Tor operator based out of Michigan, United States, was arrested in 2020 after refusing to cooperate with the United States Federal Bureau of Investigation Rockenhaus, a disabled United States military veteran, ran the fastest Tor node in the United States. He was approached sometime in late 2019 when the FBI requested he allow them arbitrary access to his exit node and allow them to decrypt traffic. He denied their request. Subsequently, in February, 2020 his home was raided. He was arrested for violating the CFAA (Computer Fraud and Abuse Act). It was alleged that he was a disgruntled ex-employee causing problems at his former place of employment. Interestingly, to "help resolve the matter", law enforcement requested he decrypt his Tor exit node to prove his innocence (???). After he refused, he was held in a pre-trial detention cell for over 3 years. He was denied bail after law enforcement stated Mr. Rockenhaus used Linux to "access the dark web" and he was "not complying" and not allowing them access to this Tor exit node. After Mr. Rockenhaus' wife filed an official complaint, and Mr. Rockenhaus was miraculously released, he was raided by the United States Marshal Fugitive Task Force TWO TIMES(???). They took him out his home, threw him to the ground, beat him, smashed his windows, and threatened to murder his animals. They are still requesting Mr. Rockenhaus allow them to access his Tor exit node. Mr. Rockenhaus still has not granted them that privilege. All of this has been captured on home security camera footage. Additionally, his wife has released all court documents. See subsequent post for more information.
13
154
2
1,180
63,365
Big drama today in the Tor community. Conrad Rockenhaus, a Tor operator based out of Michigan, United States, was arrested in 2020 after refusing to cooperate with the United States Federal Bureau of Investigation Rockenhaus, a disabled United States military veteran, ran the fastest Tor node in the United States. He was approached sometime in late 2019 when the FBI requested he allow them arbitrary access to his exit node and allow them to decrypt traffic. He denied their request. Subsequently, in February, 2020 his home was raided. He was arrested for violating the CFAA (Computer Fraud and Abuse Act). It was alleged that he was a disgruntled ex-employee causing problems at his former place of employment. Interestingly, to "help resolve the matter", law enforcement requested he decrypt his Tor exit node to prove his innocence (???). After he refused, he was held in a pre-trial detention cell for over 3 years. He was denied bail after law enforcement stated Mr. Rockenhaus used Linux to "access the dark web" and he was "not complying" and not allowing them access to this Tor exit node. After Mr. Rockenhaus' wife filed an official complaint, and Mr. Rockenhaus was miraculously released, he was raided by the United States Marshal Fugitive Task Force TWO TIMES(???). They took him out his home, threw him to the ground, beat him, smashed his windows, and threatened to murder his animals. They are still requesting Mr. Rockenhaus allow them to access his Tor exit node. Mr. Rockenhaus still has not granted them that privilege. All of this has been captured on home security camera footage. Additionally, his wife has released all court documents. See subsequent post for more information.
179
1,837
218
13,626
931,264