Christian Werling (@_cwerling) profile picture

Christian Werling

@_cwerling
 Berlin, Deutschland
user.tu-berlin.de/cwerling/
Joined May 2018
  • Tweets31
  • Following256
  • Followers219
1Media
Photo by Christian Werling (@_cwerling)
Christian Werling retweeted
Max Hoppenstedt (@m_hoppenstedt) profile picture
Max Hoppenstedt@m_hoppenstedt27 Dec 2023
The researchers also say they were able to prove the existence of the "Elon mode" (non restricted, fully self driving) and they were able to turn the mode on. All by a voltage glitch attack on the board with cheap equipment #37c3 Full story in German :spiegel.de/netzwelt/gadgets/…
(S+) Tesla: Berliner Hacker knacken den Autopilot

(S+) Tesla: Berliner Hacker knacken den Autopilot

Drei IT-Sicherheitsforscher konnten tief in die Hardware von Teslas Fahrassistenten eindringen und auf Firmengeheimnisse zugreifen. Sie schafften es sogar, einen mächtigen »Elon-Modus« zu aktivieren.

spiegel.de
1
1
3
3,748
Christian Werling retweeted
Max Hoppenstedt (@m_hoppenstedt) profile picture
Max Hoppenstedt@m_hoppenstedt27 Dec 2023
Security researchers say they were able to access restricted parts of the autopilot board in Tesla vehicles, access the neural networks and reverse engineer most of the program. Even recover deleted footage from a Tesla vehicle. Here is what they told me: spiegel.de/netzwelt/gadgets/…
(S+) Tesla: Berliner Hacker knacken den Autopilot

(S+) Tesla: Berliner Hacker knacken den Autopilot

Drei IT-Sicherheitsforscher konnten tief in die Hardware von Teslas Fahrassistenten eindringen und auf Firmengeheimnisse zugreifen. Sie schafften es sogar, einen mächtigen »Elon-Modus« zu aktivieren.

spiegel.de
2
3
2
3,440
Christian Werling retweeted
Max Hoppenstedt (@m_hoppenstedt) profile picture
Max Hoppenstedt@m_hoppenstedt27 Dec 2023
Drei Berliner Sicherheitsforschern haben mir berichtet, dass sie per Voltage-Glitch Teslas Autopilot-Platine gehackt und den gesperrten Elon-Modus eingeschaltet haben. Heute stellen Sie beim #37c3 ihre Forschung ausführlich vor, hier eine Übersicht spiegel.de/netzwelt/gadgets/…
(S+) Tesla: Berliner Hacker knacken den Autopilot

(S+) Tesla: Berliner Hacker knacken den Autopilot

Drei IT-Sicherheitsforscher konnten tief in die Hardware von Teslas Fahrassistenten eindringen und auf Firmengeheimnisse zugreifen. Sie schafften es sogar, einen mächtigen »Elon-Modus« zu aktivieren.

spiegel.de
1
6
10
2,251
Christian Werling retweeted
Lionel Rivière (@mangeurdpommes) profile picture
Lionel Rivière@mangeurdpommes4 Aug 2023
blackhat.com/us-23/briefings… Why testing fault injection attacks on integrated circuits matters? ⚡️🚗🔐 At BlackHat 23, a research team from @TUBerlin: Christian (@_cwerling), Niclas, Hans and Oleg will show voltage glitch attack against AMD Secure Processor (ASP) used in Tesla cars!
5
1
11
2,193
Christian Werling retweeted
Positive Security (@positive_sec) profile picture
Positive Security@positive_sec21 Feb 2022
We built a stealth AirTag clone that is not detected by Apple’s tracking protection. It works by only sending one beacon per generated public key. positive.security/blog/find-…
Find You: Building a stealth AirTag clone | Positive Security

Find You: Building a stealth AirTag clone | Positive Security

We built an AirTag clone capable of silently and continuously tracking someone. The device accomplishes this by sending just one beacon per generated public key, thereby staying invisible to tracking...

positive.security
5
34
3
67
Christian Werling retweeted
Positive Security (@positive_sec) profile picture
Positive Security@positive_sec7 Dec 2021
New blog post: Windows 10 RCE via an argument injection in the ms-officecmd URI handler. While our RCE vector (MS Teams) has been fixed, the argument injection still persists. positive.security/blog/ms-of…
Windows 10 RCE: The exploit is in the link | Positive Security

Windows 10 RCE: The exploit is in the link | Positive Security

Chaining a misconfiguration in IE11/Edge Legacy with an argument injection in a Windows 10/11 default URI handler and a bypass for a previous Electron patch, we developed a drive-by RCE exploit for...

positive.security
1
101
2
249
Christian Werling retweeted
Positive Security (@positive_sec) profile picture
Positive Security@positive_sec22 Jun 2021
Unpatched, critical vulnerabilities in the PlingStore app and Pling-based Linux marketplace websites and patched, lower-severity vulnerabilities in KDE Discover and the Gnome Shell Extensions website positive.security/blog/hacki…
Linux marketplaces vulnerable to RCE and supply chain attacks | Positive Security

Linux marketplaces vulnerable to RCE and supply chain attacks | Positive Security

We're disclosing patched vulnerabilities in KDE Discover and the Gnome Shell Extensions website, as well as unpatched vulnerabilities in the PlingStore app and Pling-based Linux marketplace websites...

positive.security
4
7
Different port, same exploit: Our research found how a patched vulnerability in ZyXEL NAS devices was still exploitable due to incomplete patching srlabs.de/bites/zyxel-zero-d…
5
8
Christian Werling retweeted
Positive Security (@positive_sec) profile picture
Positive Security@positive_sec12 May 2021
Apple AirTags: Arbitrary data can be uploaded from non-internet-connected devices by sending Find My BLE broadcasts to nearby Apple devices: positive.security/blog/send-…
Send My: Arbitrary data transmission via Apple's Find My network | Positive Security

Send My: Arbitrary data transmission via Apple's Find My network | Positive Security

Apple AirTags: Arbitrary data can be uploaded from non-internet-connected devices by sending Find My BLE broadcasts to nearby Apple devices. We're releasing an ESP32 firmware that turns the microco...

positive.security
4
96
12
167
Christian Werling retweeted
dmnk.bsky.social (@domenuk) profile picture
dmnk.bsky.social@domenuk30 Apr 2021
After months of hard work, we're releasing #LibAFL ✔️Scales across cores and machines ✔️Windows, Android, no_std, ... ✔ Different Modes like binary-only Frida mode (120k execs/sec on a phone anyone?) ✔ Easy to extend with grammar fuzzing, etc. ✔️Rust ;)
Andrea Fioraldi (@andreafioraldi) profile pictureAndrea Fioraldi@andreafioraldi30 Apr 2021
#libafl is now public! github.com/AFLplusplus/LibAF… We decided to make it public even without so much documentation so people can start hacking on it. With @domenuk @srubenst1341 @hackerschoice
GitHub - AFLplusplus/LibAFL: Advanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales...

GitHub - AFLplusplus/LibAFL: Advanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales...

Advanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_std, ... - AFLplusplus/LibAFL

github.com
2
65
2
209
Christian Werling retweeted
Positive Security (@positive_sec) profile picture
Positive Security@positive_sec15 Apr 2021
Insecure URI handling leads to 1-click #RCE in many popular desktop applications: #Telegram #Nextcloud #VLC #LibreOffice #OpenOffice #Bitcoin #Dogecoin #Wireshark #Mumble Check our post for more details: positive.security/blog/url-o…
Allow arbitrary URLs, expect arbitrary code execution | Positive Security

Allow arbitrary URLs, expect arbitrary code execution | Positive Security

Insecure URL handling leading to 1-click code execution vulnerabilities in Telegram, Nextcloud (CVE-2021-22879), VLC, LibreOffice (CVE-2021-25631), OpenOffice (CVE-2021-30245), Bitcoin/Dogecoin...

positive.security
32
44
utk-web now allows for marking #PSP blobs. Click a PSP card to select it! Fun trivia: Even entries from the same "directory" are scattered across a #firmware flash image. Try it out: hostile.education/utk-web/A3… #UEFI #AMD #reverseengineering
Image from Daniel Maslowski aka CyReVolt 🐢 (@OrangeCMS)
1
2
3
So let's add some JSON output support to #PSPTool for further processing. :) Thanks a ton @_cwerling for the awesome project! \o/
1
1
1
Christian Werling retweeted
Patrick Wardle (@patrickwardle) profile picture
Patrick Wardle
@patrickwardle27 Sep 2020
📝 New Blog: "FinSpy Filleted 🐟" 🔬🦠 Dives into FinFisher's (commercial) macOS implant FinSpy: patreon.com/posts/42064704 Builds on @amnesty's writeup (amnesty.org/en/latest/resear…), detailing the malware's 🔓other exploits ⚙️ kernel-mode rootkit ...& more! H/T @botherder 🙏
Image from Patrick Wardle (@patrickwardle)
1
59
3
131
Over one year we collected Android patch data from phone firmwares. Today we published an analysis detailing patch coverage and time-to-patch for the different vendors: srlabs.de/bites/android-patc… (1/3)
1
5
5
We found multiple attacks on RCS, ranging from remote text message intercept to local MitM. Vulnerabilities lie in misconfigured deployments and the official Android messaging app. We present our attacks and how to fix them @BlackHatEvents and @deepsec. srlabs.de/bites/rcs-hacking/
Image from Security Research Labs (@SecReLabs)
21
4
26
Christian Werling retweeted
Arrigo Triulzi (@cynicalsecurity) profile picture
Arrigo Triulzi@cynicalsecurity2 Sep 2019
R. Buhren et al., “Insecure Until Proven Updated: Analyzing AMD SEV's Remote Attestation” […analyzes the firmware components… on the current AMD Epyc Naples CPU series. We demonstrate that it is possible to extract critical CPU-specific keys…] arxiv.org/abs/1908.11680
Insecure Until Proven Updated: Analyzing AMD SEV's Remote Attestation

Insecure Until Proven Updated: Analyzing AMD SEV's Remote Attestation

Customers of cloud services have to trust the cloud providers, as they control the building blocks that form the cloud. This includes the hypervisor enabling the sharing of a single hardware...

arxiv.org
1
13
1
19
Christian Werling retweeted
c3voc_releases (@c3voc_releases) profile picture
c3voc_releases@c3voc_releases24 Aug 2019
Dissecting the AMD Platform Security Processor has been released on media.ccc.de and YouTube media.ccc.de/v/thms-38-disse… youtube.com/watch?v=n9dhHG4t…
3
2
Load more