This website requires JavaScript.
7f2e0aee15
cleaning up markdown
2018-05-22 22:08:31 -0700
a22a6fb8a2
cleanup commit, but check the end of REAMDE.md - is this solved\?
2018-05-22 22:06:20 -0700
a4bb31f084
this should be a working PXE config that enables telnet, just need to point the box at this
2018-05-22 22:04:55 -0700
65655ddedd
this is why you always commit your code
2018-05-22 22:01:16 -0700
2f46c5cf59
for all intents and purposes, their website is now offline, adding source files that may not be available anywhere else any more
2018-05-22 21:52:20 -0700
4e0b5b87a9
not adding to index since site has been taken down, but can now add without notification
2018-05-22 21:03:50 -0700
1ed628f90b
driving the point home
2018-05-22 20:39:25 -0700
af6b212d08
can get the SSID password, which is unchangeable from the MAC address of the device - not uid=0, but pretty bad
2018-05-22 20:32:14 -0700
a3461af723
updating weemo
2017-06-21 22:41:18 -0700
94c023fd2f
adding i-Bright7x
2017-06-21 22:41:04 -0700
e6b05b9504
adding WiP weemo
2017-06-21 22:33:28 -0700
84294fbaa9
minor updates
2017-03-22 16:21:49 -0700
64cceedced
removing unnecessary information
2017-03-12 17:28:09 -0700
a13d441d58
filling in the details
2017-03-12 17:26:50 -0700
fb89237506
cleanup
2017-03-12 17:13:34 -0700
e543b1cdc0
everything except actually rooting the device
2017-03-12 17:12:58 -0700
b0f28083f9
this was a long time coming
2017-03-06 13:49:21 -0800
eb80887463
now fixing the file
2017-03-06 13:05:28 -0800
89edc36a3c
fixing link
2017-03-06 12:49:46 -0800
09e2265c20
moving ubiquiti stuff around in preparation for unfi
2017-03-06 12:46:48 -0800
c93140e85e
adding a script to create a cpio
2017-02-21 17:43:39 -0800
2afe9dd478
adding truly decomposed firmware files
2017-02-21 17:32:53 -0800
1d3e40f562
this one was too easy
2017-02-20 11:52:29 -0800
9a5335fa31
fixing typo
2017-02-20 11:50:36 -0800
4dc3acc0dd
added documentation for revolabs utilities, expanded writeup to include firmware digging
2017-02-18 13:50:30 -0800
54162416fa
cleaning up some comments
2017-02-16 16:48:42 -0800
70cc2c099e
found a way to recover the SIP password
2017-02-15 19:40:01 -0800
aeb3c02989
furthering some changes that really should require a refactor
2017-02-09 15:57:58 -0800
cc8be4e7ec
smoothing out the edges of bf_login, building potentially malicious CSVs
2017-02-09 08:42:30 -0800
aaeb2d5c55
mostly minor cleanup changes
2017-01-28 16:20:36 -0800
0d5398dfd1
making generate_slimmed-aic-json a first class citizen, switching to non RGBA pings - losing quality, but might force the tv to read it
2016-12-23 09:27:20 -0800
ad1af59c6d
truffle shuffle
2016-12-01 17:52:01 -0800
951df3f391
building better framework for rebuilding faked artifacts
2016-12-01 16:47:48 -0800
d542c4d981
faking it out
2016-12-01 16:36:46 -0800
3357e51d06
minor cleanup
2016-11-28 19:19:51 -0800
c279365ccc
useful tools, probably should be part of ctf
2016-11-28 19:17:47 -0800
c2244a4586
adding an image to overload with
2016-11-28 19:16:56 -0800
abcb639a64
adding samples, minor fixes
2016-11-28 19:16:07 -0800
f10fb7da13
minor cujo modifications
2016-11-28 19:15:26 -0800
471727239a
more markdown mistakes
2016-11-28 17:46:27 -0800
d487075184
markdown updates, initial CUJO notes
2016-11-28 17:45:35 -0800
0b74f8ce09
adding some fake files to respond with, even if they are binary
2016-11-28 17:25:47 -0800
314c4ac9d9
trying to avoid commiting binwalk extracts
2016-11-28 17:23:58 -0800
6fc1f510e2
cleaning up generated files
2016-11-28 17:22:44 -0800
795db0bd9d
rounding out snu support
2016-11-28 17:20:19 -0800
370a9ec0cf
cleanup on impersonation
2016-11-28 17:04:52 -0800
56b133d01b
i hate markdown
2016-11-28 16:55:09 -0800
33606353b0
markdown updates
2016-11-28 16:54:10 -0800
45589f54e6
fleshing out requests and context
2016-11-23 16:00:54 -0800
1bd45ec2fa
initial readme and generic impersonation code
2016-11-23 15:43:45 -0800
b94553c2d8
committing ipk sources
2016-11-23 15:42:51 -0800
38465f7280
busybox/base-files forged packages
2016-11-18 15:49:40 -0800
72a27eb586
faking a busybox update package
2016-11-18 13:19:32 -0800
849e5ccc4f
foundations for building our rogue ipk
2016-11-17 14:51:38 -0800
439ef2ecef
sample conifg
2016-11-08 17:09:07 -0800
2e304534be
adding some initial, if not entirely useful foundations
2016-11-08 16:30:29 -0800
16ed053d82
fixing some bugs
2016-11-08 16:26:27 -0800
4b909d144c
fixing some refactoring bugs
2016-10-15 09:31:22 -0700
a48cec0de4
decoding passwords sent over http
2016-09-25 18:02:18 +0000
3dd7b04e9e
turning into a class, adding a db - it's almost a real project
2016-07-19 07:23:12 -0700
a6cf118018
updating the Hootoo writeup with some WIP IPCam notes
2016-07-19 07:04:53 -0700
eb09d9d8d0
fixing markdown
2016-07-08 21:11:36 -0700
fc2a9ac4af
fixing a logic bug when proritizing PINs
2016-07-08 01:01:11 -0700
ef0df03636
fixing some links
2016-07-08 00:18:28 -0700
6ce2201f3e
ignoring firmware files as a service
2016-07-07 23:32:05 -0700
37b9551998
adding device/manufacturer count based on blind greps
2016-07-07 23:31:44 -0700
4ce28d6147
adding rav-filehub story
2016-07-07 22:55:29 -0700
cf9b86e0f3
whoops, shouldn't do that
2016-07-07 21:03:26 -0700
79a2e73d50
initial commit of rav-filehub firmware
2016-07-07 19:05:45 -0700
fbf855a295
better sweep/specific support
2016-07-04 17:53:47 -0700
6e06c207a4
cleanup markdown
2016-07-04 17:50:43 -0700
1372c33f26
linking hued to h4ck, not rooting, but using differently
2016-07-03 18:32:31 -0700
63e8e87bc5
project support
2016-07-02 21:38:31 -0700
749e260f36
final touches on success determination, initial subnet sweeping work, readme updates
2016-07-01 15:16:47 -0700
42b17091fd
oh markdown, you're the worst
2016-06-30 21:54:35 -0700
b1a0604b06
initial hootoo commit
2016-06-30 21:52:16 -0700
2a717ad841
moving story time around
2016-06-30 21:49:46 -0700
042ae9ec1f
no plan survives first contact with the enemy
2016-06-30 21:25:13 -0700
a282584679
oh markdown
2016-06-30 19:53:50 -0700
d024a7dfcc
initial revolabs flx UC1000 commit
2016-06-30 19:50:14 -0700
e7ce29f4d4
binary firmware files, gitignore
2016-06-30 18:42:08 -0700
8b98e02302
Initial commit
2016-06-30 18:38:23 -0700
Conor Horan-Kates