Our most recent blog peeks behind the scenes of our hardware security research - how custom PCBs & small-scale circuit assembly allows us to explore new attack surfaces. We hope that sharing this enables other people to learn from our tips-and-tricks:
riverloopsecurity.com/blog/2…
Glitching has become a critical part of our hardware hacking toolkit. Today we release a new open source tool, FlashBASH, to help automate electrical glitching tests to break into serial consoles! #hardwaresecurity
#hardwarehacking
riverloopsecurity.com/blog/2…
Team member @krx__ shares his journey of deep technical analysis and recovery of Huawei EchoLife flash memory analysis. riverloopsecurity.com/blog/2…
Our newest team member Kevin shares a useful how-to on adding chip support to Flashrom – a commonly used open source tool for extracting contents from flash memory chips. #embedded #hardwarehacking riverloopsecurity.com/blog/2…
Our final installment of the HW 101 JTAG blog post series is out - we cover how to communicate with a target device via JTAG once the pinout has been identified. OpenOCD & GDB step-by-step on a real system. Take a look! riverloopsecurity.com/blog/2…
In the next installment of our hardware hacking 101 series, we introduce JTAG – while it originates from the world of manufacturing and electronics testing, it has major implications for hardware security today.
riverloopsecurity.com/blog/2…
Excerpts about our work as part of a team on @DARPA #RADICS where we are "... developing a forensics port ... for local access to a variety of diagnostic information ..." darpa.mil/news-events/2021-0… 1/3
... using this "authorized users can perform ... memory validation and forensic imaging without compromising vendor IP or a utility’s proprietary information." - a key item which we spent significant design and cryptographic engineering effort on! 2/3
Take a look at #ninjadiff, our newly released an open source binary diffing plugin for BinaryNinja! You can read about how it works and get it via riverloopsecurity.com/blog/2…
Submit issues, pull requests, and give us feedback!!!
Great work led by @TheWizard0f0dd
CC @vector35
We often get questions about when a pentest is most helpful & valuable to an organization. We hope this blog is helpful in sharing some of our observations over the years on when & how one can best help an organization.
riverloopsecurity.com/blog/2…
We recently shared some of our research on #hardware implants for the TPM bus - specifically FPGA decoding/modification on LPC bus TPMs.
Come read a brief overview on what our team shared at #ieee PAINE.
riverloopsecurity.com/blog/2…
If you're involved in connected devices, IoT, or related fields in the US, knowing what's coming with the new IoT-related law is a must. You can study up quickly before the holiday at riverloopsecurity.com/blog/2…
Check out CVE-2020-13995, found by our team member @cyberingcc! Great work applying some new tooling and lessons from research we developed to find a number of issues within an implementation of the US NITF (overhead imagery format) specification. See riverloopsecurity.com/blog/2…
As part of our work using binary instrumentation and static analysis to understand parsers’ de facto file format specifications, @cyberingcc
found parts of the spec which are likely to lead to implementation errors and vulnerabilities.
riverloopsecurity.com/blog/2…
A well segmented (security) architecture is difficult when designed from the start - and even tougher to do after-the-fact along with an acquisition transaction. Take a look at reuters.com/article/us-usa-t… - only the tip of the iceberg of work to do. @Reuters @Microsoft @tiktok_us
Check out the great work by our friends at @grimmcyber (Adam Nichols, et al) which expanded on the analysis we did of the DJI Mimo app to look at some of the same issues (and others) in the DJI GO 4 app.
riverloopsecurity.com/blog/2…
blog.grimm-co.com/2020/07/dj…
We are proud to support Howard County General Hospital's Heros in Healthcare campaign during this time! youtu.be/-hSRyoGnuXk?t=422
Our team who tests medical devices for security issues has deep experience in health: designing medical devices, as clinical providers, & scaling EHRs.
Check out a post we co-wrote with some teammates about tooling used to find modifications hidden in parsers as part of @sergeybratus's DARPA #SafeDocs project! @rmspeers @pli888 @Calaquendi44 @mlocasto
riverloopsecurity.com/blog/2…
A nice proof of concept from @cyberingcc -- a use of FUSE for helping harness fuzzing - this should be a framework that others can build on to add different permutation generators/etc. Proud to have a team doing innovative work, and sharing it with the community!
This quoted post is unavailable.