wrongbaud

Happy Friday! Looking for weekend reading about hardware hacking? JTAG: wrongbaud.github.io/posts/jtag-hdd/ SWD: wrongbaud.github.io/posts/stm-xbox… I2C: wrongbaud.github.io/posts/Holiday-… SPI: wrongbaud.github.io/posts/BasicFUN… UART: wrongbaud.github.io/posts/router-t…

We cut a microscopic wire inside a chip with an ion beam, then brought it back to life with platinum gas! My latest video is a collaboration with @Zeptobars, and I’m releasing it as a Youtube premiere at 18:00 CEST on Tuesday 12th May. youtube.com/watch?v=plcgYP…

Reverse Engineering a Ledger Nano X Hardware Implant (@_TROPICON) slides are up! grandideastudio.com/portfolio/secu…

@ElectronicsbyJH The spectrum is right there waiting - brother we know and we're on it lol

Let's get hyped about SDR (Software Defined Radio) again!

"Table Manners: Diving into Linux pagetables exp techniques" by @notselwyn (slide deck) github.com/Notselwyn/blog… #infosec #Linux

(1/4) It has risen... After 25 years of being locked away behind some of the most insane software/hardware protection I've ever seen for a $25 unlicensed console accessory, SEGA Dreamcast's DreamMovie has been unlocked, and is available for all! DOWNLOAD github.com/DerekPascarell…

Took me almost a month, but it’s finally done. I completely rewrote the first chapter of linux-insides about the Linux kernel initialization process. Now it should be aligned with modern kernels (up to master). github.com/0xAX/linux-ins…

I feel personally attacked

My Qualcomm drivers research is still in its beginning/not published yet. But I posted my setup in case anyone is interested: pwner.gg/blog/2026-04-0…

Today, we're releasing two lecture-levels of our new course: Fundamentals of ARM Exploitation! These levels will be free for everyone, indefinitely, as part of a course-preview. You can try them with a free demo account, or by following the links in the posts below!

I've been doing normal voltage glitching so far, but that has a chance to soft brick the F4 - so I'm going to take a stab with the same EMFI parameters I used beforehand. I fell down a bit of a rabbit hole enabling ETM tracing. Turns out, you can configure the ETM macrocell, hit a soft reboot, and it will be enabled IN THE BOOTROM. This ends up giving you a (rough) instruction trace on the SWO line, which is insanely helpful for profiling. RDP1->RDP0: Good to go RDP2->RDP1 (reliably): In progress!

Yooo @wrongbaud folks bugging the shit outta me jonesing to know if ya made any headway on the stm32 glitching?

Grab your d20 and your text editor! ⚔️ Turn your daily debugging into a high-fantasy quest with the Syzkaller Dungeon. Slay real kernel panics, earn XP, unlock epic loot, and defend your corporate kingdom. Roll for initiative: syzbot.org/upstream/syz-d…

@blackroomsec Thanks for checking it out!

Also read their Hardware Instrumentation post. This is tight. I love this. Succint and well-organized.

We're excited to announce the launch of a new course on RET2 WarGames: Fundamentals of ARM Exploitation! This is an accelerated,⚡️ 5-chapter course 📚meant to quickly build familiarity with binary-exploitation on ARM platforms. Check it out! wargames.ret2.systems/course/foae

The Nintendo Talking Flower firmware does not check the size of the language index table when loading it from SPI flash into RAM, allowing me to corrupt the stack, execute arbitrary code, and dump the protected STM32 firmware🤣 (SHA1 51ec2ee3bbc12772cd4abed1bf2d26b02e541e14)

chips have become smarter about power supply attacks to bypass access port protection etc so now they literally EMP specific parts of the chip (sometimes with a gantry system to iterate over every area of the chip) to glitch it and break protection. It’s nuts.

@i2cjak It's pretty wild that it actually works, I put together some slides on this a while ago that you might find interesting: voidstarsec.com/csw-2024/

I'm looking for a new role! I've spent the last several years doing offensive security work across both government and commercial environments: red teaming, penetration testing, threat intel and malware analysis. Before that, several years as an Navy intelligence analyst. Certs: OSCE3 | OSCP | GIAC CTI | CRTO Looking for remote roles where I can keep doing hands-on offensive work: red team, pentesting, or threat research. If something sounds like a fit, feel free to reach out. #OpenToWork #RedTeam #OffensiveSecurity #CyberSecurity #OSCE3

Don't know who needs this or for what exactly but here is a MIPS ISA cheat sheet 🙃kth.se/social/files/5…

All foreign made routers are banned in the USA. Panic!! Except… it only applies to new models. All existing are untouched. People overhyping this as if consumers should panic-buy routers are silly. It DOES suck for anyone trying to MAKE a new model.

@d0tslash Pretty sure my folks thought they could pay for college w/Camel Cash. We had two of the jackets XD

I know ya all remember Camel Cash!? Joe was cool as fuck, but never made me personally *want* to smoke.