The Curious Engineer

All blogs / Security

Pen Test Partners

pentestpartners.com

Explore Pen Test Partners' Security Blog for expert insights into penetration testing, IoT vulnerabilities, red teaming strategies.

SecurityReverse engineeringEmbedded / microcontrollers

’15’20’25
Posts
986 from 4 Aug 2013 to 28 Oct 2026
Posting
weekly (46 in the last year)
Kind
company blog
Feed
https://www.pentestpartners.com/feed/

2026 39

  1. Automated warehouses: 8 third parties, one network and no owner
  2. PHP2Shell and what the AI headlines are missing
  3. Printerpix and the not so private photo album
  4. You don’t need a nation state to warm up a fridge
  5. Your AI can access it. Can an attacker?
  6. Safe, but sailing nowhere. Can you stop a fleet of ships?
  7. Is AI toast? Building an AI Talkie Toaster
  8. Passing the bucks $$$: Passback attacks explained
  9. Why your data is safer than you think on public Wi-Fi
  10. Estate planning of credentials
  11. One SSID To Rule Them All
  12. DEFCON 34: Planes, PLCs and 6am runs
  13. GivEnergy enters administration, batteries expose home networks
  14. Breaking the attack chain created by exposed cloud secrets
  15. If you’re going to vibe code it, why not vibe pen test it?
  16. Click. Click. Fake it until they make it… inside
  17. Flying with the Flipper Zero
  18. EN 303 645 is the baseline, not the finish line for IoT security
  19. Decoding Rust strings
  20. PTP Cyber Fest 2026. Built for people to get involved
  21. ClickFix, CrashFix and the growing family of copy and paste attacks
  22. Shelly Wall Display exposed RPC over Bluetooth
  23. OT pen test findings that plant teams can actually use
  24. AI can help in DFIR, but it cannot replace investigator judgement
  25. You can pen test OT networks without breaking them
  26. Digital Operational Resilience Act (DORA)
  27. Insecure IAM is the root of many cloud security failures
  28. Taming the dragon: reverse engineering firmware with Ghidra
  29. Breaking Out of Citrix and other Restricted Desktop Environments
  30. EV batteries as grid infrastructure and the security risk that follows
  31. Shelly IoT door controller config fail: leaving your garage, home and security exposed
  32. Covert recording is easy, which is the problem
  33. Movie breakdown: Hackers (1995)
  34. Preparing for the EU Cyber Resilience Act (CRA)
  35. Carlsberg… probably not the best cybersecurity in the world
  36. Compromising a multi-cloud environment from a single exposed secret
  37. AI noise and the effect it’s having on vulnerability disclosure programs
  38. 2025, the year of the Infostealer
  39. Beyond cloud compliance dashboards, what’s next?

2025 76

  1. Eurostar AI vulnerability: when a chatbot goes off the rails
  2. The built-in Windows security features you should be using
  3. Android Activities 101
  4. Common Kubernetes misconfigurations and how to avoid them
  5. Exploiting AgTech connectivity to corner the grain market
  6. Finding your path into DFIR
  7. What testers need to know about the changes to the CHECK scheme
  8. Security awareness: four pillars for staying safe online
  9. Hardening your home lab
  10. Stop payroll diversion scams before they start
  11. The logs you’ll wish you had configured if (when) you are breached…
  12. Compiling static Nmap binary for jobs in restricted environments
  13. What Speed 2 gets right and wrong about ship hacking
  14. Spot trouble early with honeypots and Suricata
  15. Discord as a C2 and the cached evidence left behind
  16. A buyer’s guide to CHECK in 2025
  17. Start hacking Bluetooth Low Energy today! (part 3)
  18. Android Broadcast Receivers 101
  19. Start hacking Bluetooth Low Energy today! (part 2)
  20. Start hacking Bluetooth Low Energy today! (part 1)
  21. Terraform Cloud token abuse turns speculative plan into remote code execution
  22. Thumbnail forensics. DFIR techniques for analysing Windows Thumbcache
  23. How to transfer files in AWS using SSM
  24. DFIR tools and techniques for tracing user footprints through Shellbags
  25. Rethinking cyber insurance questions to find real risk
  26. Our capabilities. A story about what we can achieve
  27. Android Services 101
  28. Leaked data. Continuous glucose monitoring
  29. Using AI Chatbots to examine leaked data
  30. Framework 13. Press here to pwn
  31. Sil3ncer Deployed – RCE, Porn Diversion, and Ransomware on an SFTP-only Server
  32. How to conduct a Password Audit in Active Directory (AD)
  33. Pet microchip scams and data leaks in the UK
  34. How we turned a real car into a Mario Kart controller by intercepting CAN data
  35. CSP directives. Base-ic misconfigurations with big consequences
  36. Prepare for the UK Cyber Security and Resilience Bill
  37. Android AI UX is great until it leaks your data
  38. PTP Cyber Fest 2025. More than just another conference
  39. Fire detection system been pwned? You’re not going to sea
  40. How to load unsigned or fake-signed apps on iOS
  41. War stories from the DFIR front line
  42. Fully segregated networks? Your dual-homed devices might disagree
  43. Bypass SharePoint Restricted View to exfiltrate data using Copilot AI and more…
  44. VNC. RDP for all to see
  45. New cybersecurity rules for smart heat pump manufacturers
  46. RCEs and more in the KUNBUS GmbH Revolution Pi PLC
  47. Exploiting Copilot AI for SharePoint
  48. The remote desktop puzzle. DFIR techniques for dealing with RDP Bitmap Cache
  49. Hiding behind a password
  50. The dangers of web based messaging apps
  51. Unallocated space analysis
  52. Not everything in a data leak is real
  53. Don’t use corporate email for your personal life
  54. Preparing for the EU Radio Equipment Directive security requirements
  55. Backdoor in the Backplane. Doing IPMI security better
  56. The first 24 hours of a cyber incident. A practical playbook
  57. Cybersecurity communities. Small hacker groups, big impact
  58. Take control of Cache-Control and local caching
  59. How I became a Cyber Essentials Plus assessor
  60. DNSSEC NSEC. The accidental treasure map to your subdomains
  61. A dive into the Rockchip Bootloader
  62. Pen testing avionics under ED-203a
  63. Watch where you point that cred! Part 1
  64. New mandatory USCG cyber regulations. What you need to know
  65. PCI DSS v4.0 Evidence and documentation requirements checklist
  66. PCI DSS. Where to start?
  67. ICS testing best results. Hint: Blend your approach
  68. A tale of enumeration, and why pen testing can’t be automated
  69. How Garmin watches reveal your personal data, and what you can do
  70. Cyber security guidance for small fleet operators
  71. How to secure body-worn cameras and protect footage from cyber threats
  72. Security flaws found in tiny phones promoted to children
  73. Tackling AI threats. Advanced DFIR methods and tools for deepfake detection
  74. The unexpected effects of GPS spoofing on aviation safety
  75. 10 Non-tech things you wish you had done after being breached
  76. The surprising existence of the erase button on cockpit voice recorders

2024 65

  1. Heels on fire. Hacking smart ski socks
  2. Practice being punched in the face. The realities of incident response preparation
  3. How easily access cards can be cloned and why your PACS might be vulnerable
  4. Making sure your door access control system is secure: Top 5 things to check
  5. Is secure boot on the main application processor enough?
  6. 6 non tech things you wish you had done before being breached
  7. BEC-ware the Phish (part 3): Detect and Prevent Incidents in M365
  8. How we helped expose a £12 million rental scam
  9. IACS UR E26 and E27 guidance
  10. Did security gaps at Antwerp port enable drug smuggling operations?
  11. BEC-ware the Phish (part 2): Respond and Remediate Incidents in M365
  12. You lost your iPhone, but it’s locked. That’s fine, right?
  13. What goes into testing a ship?
  14. Maritime lawyers assemble!
  15. Mounting memory with MemProcFS for advanced memory forensics
  16. Testing the security of CCTV systems
  17. Using Volatility for advanced memory forensics
  18. BEC-ware the phish (part 1). Investigating incidents in M365
  19. Imposter syndrome in cyber security
  20. How to handle vulnerability reports in aviation
  21. Airbus Navblue Flysmart LPC-NG issues
  22. How can you protect your data, privacy, and finances if your phone gets lost or stolen?
  23. Direct Memory Access (DMA) attacks. Risks, techniques, and mitigations in hardware hacking
  24. Proroute H685 4G router vulnerabilities
  25. Cyber threats to shipping explained
  26. Living off the land, GPO style
  27. Smart home security advice. Ring, SimpliSafe, Swann, and Yale
  28. Advanced forensic techniques for recovering hidden data in wearable devices
  29. How to enhance the security of your social media accounts
  30. How to root an Android device for analysis and vulnerability assessment
  31. Insights and highlights from DEF CON 32
  32. Living off the land with Bluetooth PAN
  33. Key safe security, or the lack of it
  34. Fuzzy matching with Ghidra BSim, a guide
  35. Bootloaders explained
  36. Leave the World Behind, or don’t
  37. Pen testing cruise ships
  38. RCE vulnerability in OpenSSH – RegreSSHion (CVE-2024-6387)
  39. Glastonbury ticket hijack vulnerability fixed
  40. Dodgy disks. My 32TB SSD Adventure
  41. HUMINT in a cyber world
  42. UK PSTI? You’ll need a Vulnerability Disclosure Program!
  43. Impacts on ICS from the updated Cyber Assessment Framework (CAF)
  44. Pipedream ICS malware toolkit is a nightmare
  45. Vulnerabilities that (mostly) aren’t: LUCKY13
  46. Bypassing MFA on Microsoft Azure Entra ID
  47. Can ships be hacked?
  48. Navigating the perilous waters of conference invitations
  49. The big play of autonomous vehicles
  50. Living off the land with native SSH and split tunnelling
  51. Advice for manufacturers on the coming PSTI regulation
  52. No fix KrbRelay VMware style
  53. Cyber security for Credit Unions 101
  54. QR Phishing. Fact or Fiction?
  55. Android Content Providers 101
  56. Ski & bike helmets protect your head, not location or voice
  57. Hacking Electronic Flight Bags. Airbus NAVBLUE Flysmart+ Manager
  58. OSINT in 60 seconds. Mind reading on TV
  59. 10 years on from the Target breach. Has building cyber security improved?
  60. Cockpit door lock auto-unlock is no surprise
  61. Listening in at Latimer House. RF emissions and more
  62. RAID Technology and the importance of disk encryption in data security
  63. Mobile malware analysis for the BBC
  64. Helping a banking fraud victim
  65. Helping a mobile malware fraud victim

2023 44

  1. Socks! Our cyber prediction for 2024
  2. Intercepting MFA. Phishing and Adversary in The Middle attacks
  3. Navigate FDA 524b to get your medical cyber device to market
  4. OSINT. What can you find from a domain or company name
  5. OPSEC failures when threat hunting
  6. Are Vehicle to Grid spikes coming?
  7. Cap Dev. Better red teaming with continuous Capability Development
  8. FujiFilm printer credentials encryption issue fixed
  9. FDA medical IoT cyber device compliance. FD&C 524b
  10. Using Velociraptor for large-scale endpoint visibility and rapid threat hunting
  11. IoT Secure Development Guide
  12. The reality of Apple watch pen testing
  13. Call centres. Outbound call verification
  14. Fastboot Fuzzing
  15. Which security framework? All of them, in the SCF
  16. Hacking ECDIS; electronic chart and navigation display systems on ships
  17. 3yrs of CAA ASSURE assessments. What we’ve learned
  18. PCI v4 is coming. Are you ready?
  19. Information disclosure through insecure design
  20. A broken marriage. Abusing mixed vendor Kerberos stacks
  21. The most hated man on the internet. Lessons to learn
  22. Scorpion CBS show. Plane hack
  23. Die Hard 2. Or how not to hack airplanes
  24. Vulnerability disclosure in aviation
  25. PTP at DEF CON 31 2023
  26. n00b’s guide to DEF CON. Surviving the Matrix of the underground
  27. Have you been compromised?
  28. Exposed Gits: 10 Years on
  29. Black Basta ransomware
  30. WhosHere Plus. Trilateration vulnerability
  31. EFB vulnerability in Lufthansa’s Lido eRouteManual
  32. All your building are belong to us
  33. It’s always DNS, here’s why…
  34. Netflix MH370: The plane that wasn’t hacked
  35. Bullied by Bugcrowd over Kape CyberGhost disclosure
  36. London Councils & pirate books. Google dorking for subdomain takeovers
  37. Pen testing cargo vessels without putting OT at risk
  38. Carbon reduction at PTP
  39. Monetising hacking by shorting commodity shipments
  40. Finding forensics breadcrumbs in Android image storage
  41. Causing incidents with in-flight entertainment systems
  42. OSINT your OT suppliers
  43. UK gov website being used to redirect to porn sites
  44. RCE on Steam through the Cultist Simulator game

2022 45

  1. What’s My Name Again? Reolink camera command injection
  2. Consumer advice for buying smart IoT devices this Christmas
  3. Hive Ransomware is on the rise. How should you deal with it?
  4. Stories from the cloud: security risks we see in testing
  5. Effecting positive change in the Internet of Things
  6. Social Engineering dos and don’ts
  7. Moto E20 Readback Vulnerability
  8. MS Enterprise app management service RCE. CVE-2022-35841
  9. Living off the Cloud. Cloudy with a Chance of Exfiltration
  10. Airbus AoA – Angle of Attack sensor issue
  11. Attacking Encrypted HTTP Communications
  12. You can’t stop me. MS Teams session hijacking and bypass
  13. DEF CON 30. Hacking EFBs. Engine Performance
  14. When disclosure goes wrong. People
  15. Living off the land, AD CS style
  16. Bluetooth + Electrical switchgear
  17. Database Integrity Vulnerabilities in Boeing’s Onboard Performance Tool
  18. Maritime regulation. All Hands-on Deck!
  19. Efficient Infrastructure Testing
  20. Attacking EFB updates
  21. EFB ePIL. Pinching passenger PII from pilots
  22. Stop using phishing as a measure of your cyber awareness culture
  23. EFB Tampering. Holdover Time
  24. Cloud OSINT. Finding Interesting Resources
  25. CMC Electronics EFB breakout vulnerability
  26. Follina 0day exploit. Malicious code execution in Office docs
  27. Azure Cloud Takeover
  28. 747 Hackathon
  29. Password policy guidance
  30. We need to talk about sex toys and cyber security
  31. Galleon NTS-6002-GPS Command Injection vulnerability (CVE-2022-27224)
  32. Got the security controls wrong in OT and maritime? Watch as engineers work around them
  33. Constrained environment breakout. .NET Assembly exfiltration via Internet Options
  34. Reporting of cyber incidents becomes law in the USA
  35. The reality of OT segregation
  36. To Pay or Not to Pay? That is the Ransomware question
  37. Red Team lab automation
  38. OAuth consent phishing, in the wild
  39. OpSec. Hunting wireless access points
  40. Vulnerabilities that aren’t. Unquoted Spaces
  41. DPD package sniffing
  42. Vulnerabilities that aren’t. ETag headers
  43. Who has access to your leased Tesla?
  44. Vulnerabilities that aren’t. Cross Site Tracing / XST
  45. Domestic CCTV and audio recording

2021 69

  1. Audio bugging with the Fisher Price Chatter Bluetooth Telephone
  2. Gumtree – leaking your data and not really listening
  3. A masterclass in responding to vulnerability disclosure: The Buddi app and tracker
  4. What does the Product Security and Telecommunications Infrastructure bill mean for me?
  5. SkyFail. 6 million routers left exposed
  6. Hijacking smart luggage
  7. Pun-free Cylance vulnerability, fixed
  8. Time based username enumeration
  9. Limiting your exposure to location data resellers
  10. DCOM abuse and lateral movement with Cobalt Strike
  11. Germ-term, but all year. How criminals are hacking schools
  12. Free BrewDog beer with a side order of shareholder PII?
  13. How to build a password cracking rig during a worldwide chip shortage
  14. When the IoT vendor goes bust
  15. Securing mobile devices. A timely reminder
  16. Commercial Air Transport EFB Regulation
  17. EFB Tampering. Approach and Landing Performance Part 2
  18. EFB Tampering. Approach and Landing Performance Part 1
  19. EFB Tampering. The Human Factor
  20. ASSURE Case Study: Two
  21. ASSURE Case Study: One
  22. From open Guest Wi-Fi to pwning a lift
  23. OpSec. Expanding your search: Hunting domains
  24. Why the Raspberry Pi isn’t suitable for IoT
  25. Admin password re-use. Don’t do it
  26. How to install Frida into an Android application
  27. Breaking the NFC chips in tens of millions of smart phones, and a few PoS systems
  28. Breaking the Android Bootloader on the Qualcomm Snapdragon 660
  29. OpSec Leaky Images
  30. Smart car chargers. Plug-n-play for hackers?
  31. Are you sharing your address on social media?
  32. The Cloud in the clouds
  33. Top 10 Cloud security tips
  34. SNMP – Simply Not My Problem. Or is it?
  35. Ransomware. In the air?
  36. Google for OpSec data discovery
  37. Red Teaming. Practice what you preach
  38. Tracking Amazon delivery staff
  39. Why hackers don’t fly coach
  40. Deploying EFBs securely
  41. Do you know your OpSec?
  42. Smart lighting security
  43. Getting a persistent shell on a 747 IFE
  44. EFB Tampering 3. Take-off pt1
  45. EFB Tampering 3. Take-off pt2
  46. Echelon PII Leak and Disclosure Fail
  47. EFB Safety Advice for Pilots
  48. Tour de Peloton: Exposed user data
  49. 2021. The age of the super vulnerability?
  50. Training apps. Have their privacy settings improved in 5 years?
  51. Homeworking vs Homeschooling. The cyber challenge
  52. EFB Tampering 2. Device Integrity
  53. Security vs User Journey
  54. Dumping LSASS in memory undetected using MirrorDump
  55. Multi-factor Authentication. Reset MFA you say?
  56. Out of cyber class. Maritime compliance.
  57. Is IoT ever really yours?
  58. EFB Tampering 1. Introduction and Class Differences
  59. Grid. Locked.
  60. Feature and Permission Policies. Security issues
  61. K&R insurance. Kidnap and Ransom(ware)
  62. Reverse Engineering Keys from Firmware. A how-to
  63. Email Relaying. A how-to and a reminder
  64. Cyber Essentials and the New Normal
  65. Three Word Passwords
  66. Cyber Security advice for Finance staff
  67. Azure AD. Attack of the Default Config
  68. Where maritime cyber checklists fail
  69. Schneider T200 RTU vulnerabilities

2020 88

  1. How to make a software BTRFS RAID1 with LUKS2 FDE
  2. How to use Keepalived for high availability and load balancing
  3. A Logical Volume Manager / LVM primer for Linux
  4. Mimosa Cloud. Invite friends, not hackers
  5. Serious Vulnerabilities in Dualog Connection Suite
  6. Locking down your cyber life in lockdown
  7. What the cluck?! Cyber hygiene when eating out.
  8. Understanding Binary and Data Representation with CyberChef
  9. OBDeleven vulnerability
  10. Brute forcing device passwords
  11. Digital Forensics acquisition
  12. Snakes and Ladder Logic
  13. Password choice
  14. Abusing RDP’s Remote Credential Guard with Rubeus PTT
  15. Cyber Security Month. What can you do?
  16. Smart male chastity lock cock-up
  17. DLL Hijacking in NVIDIA SMI
  18. Cloud-y, with a chance of hacking all the wireless things
  19. CVE-2020-1472/Zerologon. As an IT manager should I worry?
  20. The Return of Raining SYSTEM Shells with Citrix Workspace app
  21. Speed 2 – The Poseidon Adventure – Part Two
  22. Consumer advice: Giggle vulnerability
  23. 360lock Smart Lock Review
  24. Speed 2 – The Poseidon Adventure – Part One
  25. Cloud firewall management API SNAFU put 500k SonicWall customers at risk
  26. A Vulnerability Disclosure Program is not just a page on a web site
  27. Scanning for UK gov security.txt files
  28. Breaking Samsung firmware, or turning your S8/S9/S10 into a DIY “Proxmark”
  29. DEF CON 28: 747 Walkthrough from a Hacker’s Perspective
  30. DEF CON 28: ILS and TCAS Spoofing
  31. DEF CON 28: Introduction to ACARS
  32. Security Awareness is as valuable today as ever
  33. Building a lab with Server 2019 Server Core and PowerShell …then attacking it!
  34. Raining SYSTEM Shells with Citrix Workspace app
  35. Threat modelling and IoT hubs
  36. Bridging the gaps between Red and Blue teaming
  37. Hacking smart devices to convince dementia sufferers to overdose
  38. Patchless AMSI bypass using SharpBlock
  39. Pwning smart garage door openers
  40. Identity in IoT
  41. What an IoT assurance scheme could look like
  42. Scams and how to spot them
  43. Congrats, you got everyone remote. But did you do it securely?
  44. Embedded security fails in ICS
  45. Revisiting old tools
  46. A cyber warning light. The canary in the mine
  47. Unclamping the Barnacle
  48. Introduction to PLCs and Ladder Logic
  49. Reverse Engineering a 5g ‘Bioshield’
  50. In Flight Entertainment System Security
  51. Docker Desktop for Windows PrivEsc (CVE-2020-11492)
  52. Ethical dilemmas with responsible disclosure
  53. Short beacon analysis on the NHS iOS Tracking application
  54. Housemates. The new Red Team?
  55. How quickly can you respond?
  56. Speaking at security events
  57. Jeopardising aircraft through TCAS spoofing
  58. GDPR.EU has er… a data leakage issue
  59. From a TCU to Corporate Domain Admin
  60. Are you cyber seaworthy?
  61. You can’t build a great IoT system without a strong foundation
  62. SweetPotato – Service to SYSTEM
  63. Authenticating your call centre when everyone is remote
  64. Honeyroasting. How to detect Kerberoast breaches with honeypots
  65. Quick wins with Adobe Experience Manager
  66. Turning an OBD-II reader into a USB / NFC attack tool
  67. Spying on old folks
  68. PrivEsc in Lenovo Vantage. Two minutes later
  69. Introduction to Bluetooth Low Energy
  70. 9 things to consider when staff work from home unexpectedly
  71. Hardware Router CTF
  72. Fill your Boots with credential stuffing protections
  73. A not so Clearview?
  74. From Minecraft to Metasploit. Game hacking could start your cyber security career
  75. Hardcoding Keys. Is that Wyse?
  76. Ships can’t be hacked. Wrong
  77. Out Of Band, Out Of Sight, Out Of Mind
  78. Business Email Compromise. What to do
  79. Reverse Engineering the Tesla Firmware Update Process
  80. Reverse Engineering Tesla Hardware
  81. Password managers for all staff. Why the resistance?!
  82. 2×4 Security
  83. Pen Testing Ships. A year in review
  84. HTTP Request Smuggling. A how-to
  85. ASSURE Aviation Cyber Security Testing
  86. Embedded devices. Typical security issues
  87. IR & Forensics in the Cloud
  88. Quick Wins to Combat Data Leaks

2019 95

  1. Kids Tracker Watches: CloudPets, exploiting athletes and hijacking reality TV
  2. Xmas Light Security Improves… a bit
  3. Hacking Hardware Password Managers: The RecZone
  4. Hacking Hardware Password Managers: passwordsFAST
  5. Hacking Hardware Password Managers: Royal Vault Password Keeper
  6. Nuclear Satcoms
  7. Commands and Tools for Embedded Reverse Engineering
  8. Analysing the Attack Surface of an Industrial Data Acquisition Device
  9. The snooping girl on a train, again. How to compromise a business
  10. Embedded device research. The tools you’ll need
  11. Ships engines, a guide for pen testers
  12. Christmas socialising. Goodwill to all, and keep your devices safe
  13. The Disgruntled Employee?
  14. Updating Airplanes
  15. Schiphol hijack false alarm. An insiders view of what happened
  16. Pwning a Smart Car Charger, Building a Botnet
  17. Objections to IoT regulation. A rational reply
  18. Unmasking mystery boxes on ship’s bridges
  19. Mapping the Attack Surface of an Airport
  20. Help, my accounts have been hacked! What should I do?
  21. Too Interested?
  22. Real-life social engineering. Another two days in tweets
  23. OSINT for Avionics
  24. The 5 breach readiness mistakes
  25. My environmental journey
  26. A security researcher has made contact. What do I do?
  27. Think you’ve had a breach? Top 5 things to do
  28. Drilling open a smart door lock in 4 seconds
  29. A Pen Tester’s First Solo: Aviation Security 101
  30. How to: Kerberoast like a boss
  31. IoT security. A retrospective
  32. Real-life social engineering. Two days in tweets
  33. Pwning a Siemens Scalance ICS switch through ARM reversing
  34. A Secure “Smart” Kettle?
  35. PrivEsc in Lenovo Solution Centre, 10 minutes later
  36. Lojack’d: Pwning Smart vehicle trackers
  37. Dating apps that track users from home to work and everywhere in-between
  38. Reverse Engineering 4G Hotspots for fun, bugs and net financial loss
  39. Breaking (Bad) Cross-Site Request Forgery Protection – The Netgear Nighthawk M1
  40. CVE-2019-12103 – Analysis of a Pre-Auth RCE on the TP-Link M7350, with Ghidra!
  41. Breaking (bad) firmware encryption. Case study on the Netgear Nighthawk M1
  42. ZTE MF910 – An end of life router, running lots of vivacious hidden code
  43. Group sex app leaks locations, pics and personal details. Identifies users in White House and Supreme Court
  44. PTP at DEF CON 27
  45. DCMS Practical Guidelines. Actionable information
  46. Vehicle Telematics Security; getting it right
  47. Social engineering. When you’re the mark…
  48. Fails and Fixes with IoT
  49. Burning down the house with IoT
  50. Getting your head under the hood and out of the sand: Automotive security testing
  51. Slok API
  52. The null choice. A social engineering example in the wild
  53. Ninja Turtles in your network: LAN Turtle 3G. A how-to for red teaming
  54. Don’t ‘Roley’ your own encryption, says Bob the Builder
  55. The not so ultra lock
  56. F5 Networks Endpoint Inspector – Browser-to-RCE?
  57. Double-Free RCE in VLC. A honggfuzz how-to
  58. Why we shouldn’t use sequential booking references
  59. Ewon Flexy IoT Router. A Deep dive
  60. Sharing the Secrets: Pwning an industrial IoT router
  61. Covert Keylogging: Sniping your Typing
  62. Bloodhound walkthrough. A Tool for Many Tradecrafts
  63. Don’t get burnt on pay day. How to buy IoT gadgets sensibly
  64. Securing your red team kit with Uncomplicated Firewall
  65. Pwning the Nokelock API
  66. Tesla Killer: The Fuzzed and the Furious
  67. FUD 101: How not to report healthcare cybersecurity issues
  68. eyeDisk. Hacking the unhackable. Again
  69. Pwning WordPress GraphQL
  70. How To Do Firmware Analysis. Tools, Tips, and Tricks
  71. UK Government gets serious about consumer IoT security. Legislation on the way
  72. Tic Toc Pwned
  73. Cobalt Strike. Walkthrough for Red Teamers
  74. Hacking Superyachts. Advice for integrators
  75. Hacking Superyachts. Advice for captains
  76. Hacking Superyachts. Advice for owners
  77. Business banking fraud. Keep your eggs in TWO baskets. Here’s why…
  78. Remote command injection through an endpoint security product
  79. Connected camera cock up
  80. Walkthrough. Investigating an SSD
  81. Gone in six seconds? Exploiting car alarms
  82. Hacking ski helmet audio
  83. Cisco RV130 – It’s 2019, but yet: strcpy
  84. Different ‘smart’ lock, similar security issues
  85. Sinking a ship and hiding the evidence
  86. Oracle MAF store bypass, a how-to
  87. Vulnerability disclosure buzzword bingo!
  88. BBC Inside Out. Consumer advice for the ‘smart’ homeowner
  89. Burp HMAC header extensions, a how-to
  90. Super-systemic IoT flaws
  91. Hacking floating hotels. Cruise ship compromise on the high seas
  92. GPS watch issues… AGAIN
  93. IoT: OFF by default
  94. Shipping operators, what you need to know about phishing and CEO fraud
  95. Hacking the Echo echo echo

2018 92

  1. Hackers in Hot Water. Pwning smart hot tubs, yes really
  2. Satellite communications equipment security
  3. Worried about Spouseware?
  4. BBC: MiSafes’ child-tracking smartwatches are ‘easy to hack’
  5. ITV: New rules to prevent children’s ‘smart’ toys from being hacked
  6. Advice on buying ‘smart’ gadgets for Christmas
  7. Consumer Advice: Kids GPS tracker watch security
  8. Tracking and snooping on a million kids
  9. Flogging a dead smart horse
  10. No need for lock picking tools
  11. Ghost hardware. Device No.1, the Ghost Pro
  12. Ghost hardware. Device No.3, the Ghost Rover
  13. Ghost hardware. Device No.2, the Boo Buddy
  14. Hacking ghost hunters
  15. Cisco device config dumping
  16. Time Travel Debugging: finding Windows GDI flaws
  17. ‘Secure by Design’ & SB-327. Standards for a secure IoT?
  18. Smart male chastity lock cock-up – plot thickening
  19. Which? Magazine recommends vulnerable smart home camera
  20. Running a security awareness program
  21. Speaking at TEDx
  22. Container theft, the legal system and poor maritime security
  23. Hacking AIS
  24. Hacking an assault tank… A Nerf one
  25. Automotive theft affects shipping security
  26. Smart Locks: Dumb Security
  27. Smart Lock Security: Interview with hardware.io
  28. PTP, IoT & the Norwegian Government
  29. Hacking the Bitfi Part 5: MITM transactions
  30. Bitfi research receives Pwnie Award for ‘lamest vendor response’
  31. Tamper proofing review: the iZettle card payment terminal
  32. Copycat Kali, with mykali for Kali Linux
  33. Hacking the Bitfi Part 3: The device with no storage
  34. COSCO incident. Phishing frenzy and exploding goods?
  35. Hacking the Bitfi. Part 2: John McAfee’s video
  36. Hacking the Bitfi. Part 1
  37. “Unhackable” Bitfi crypto wallet. What’s all the fuss about?
  38. Security Alarm Round-up
  39. FLIR FX / Lorex video stream hijack: Disclosure train wreck
  40. Hacking Swann & FLIR/Lorex home security camera video
  41. Bluetooth vuln CVE-2018-5383 explained
  42. EU Cybersecurity Act IoT FAIL
  43. Data exfiltration techniques
  44. Breaking up is hard to do… with IoT
  45. Hacking Navtex maritime warning messages
  46. Hacking Serial Networks on Ships
  47. Hardware reverse engineering. A tale from the workbench
  48. Windows Server settings. Administrative Templates – Network Items. A security how-to
  49. Totally Pwning the Tapplock (the API way)
  50. Totally Pwning the Tapplock Smart Lock
  51. Hacking, tracking, stealing and sinking ships
  52. So, you just caused a data breach, by CCing the wrong person in an email…
  53. Z-Shave. Exploiting Z-Wave downgrade attacks
  54. Penetration Testing Requirements for GDPR
  55. Hijacking Philips Hue
  56. Stealing container ship cargo through LOC messaging
  57. What can maritime insurers learn from cyber liability insurers?
  58. Hacking train passenger Wi-Fi
  59. Man Climbs Severn Bridge. Your office is twice as easy and half as scary
  60. ‘Hacking’ the Nespresso Prodigio and Jura E8 coffee machines
  61. Soldering for Reverse Engineering. Swapping out eSIMs with “normal” SIMs
  62. Accidentally “hacking” Red Hat
  63. A day in the life of Open Banking
  64. From PNG tEXt to Persistent XSS
  65. Maersk wasn’t hacked
  66. Crashing ships by hacking NMEA sentences
  67. PTP and Microsoft to brief EU Parliament
  68. Abusing Duo 2FA
  69. Tactical Advice for Maritime Cyber Security – Top 10
  70. If you aren’t soldering, you probably aren’t testing IoT thoroughly
  71. Docker for Hackers? A pen tester’s guide
  72. WHY is consumer IoT insecure?
  73. Security by Design. UK Gov’s first stab at IoT consumer protection isn’t good enough
  74. Hijacking & rick rolling a smart guitar amp
  75. Reverse Engineering BLE from Android apps with Frida
  76. IoT vulns are unexploitable by the masses. Wrong
  77. Xiong Mai DVR Revisited
  78. Hacking / ruining the Samsung Smart Fridge
  79. Hacking maritime blockchains
  80. A smart sex toy that pings your employer?
  81. Reverse engineering microcontrollers WITHOUT a datasheet
  82. Want entropy? Don’t use a floating ADC input
  83. Runtastic deserves more ‘heat’ than Strava!
  84. Blockchain. Changing the attackers aim
  85. NoT: Taking the ‘internet’ out of IoT
  86. VTech strikes again
  87. Building half a ‘Proxmark’ for $10
  88. Hacking maritime IFTFCC messaging for invoice fraud
  89. NRF51822 code readout protection bypass- a how-to
  90. Tracking & hacking ships with Shodan & AIS
  91. Top 10 things to improve OT security
  92. The most common IoT device security failings of 2017

2017 75

  1. Sinking bulk carrier ships by hacking HSMS
  2. Too cold to work? School closed? Sure your BMS hasn’t been hacked?
  3. Hacking a talking toy parrot
  4. This week’s IoT security news
  5. Practical security advice for keyless cars
  6. Hacking your office through your screen caster
  7. Destroy kids GPS watches says German Federal Network Agency
  8. IoT vendors. Avoid recalls, choose a secure chip
  9. Making prawn espressos, or hacking ships by deciphering BAPLIE EDIFACT messaging
  10. Sinking container ships by hacking load plan software
  11. Exfiltration by encoding data in pixel colour values
  12. Hacking IoT vendors & smart cars via private APNs
  13. Compromising unencrypted butt plug comms
  14. OSINT from ship satcoms
  15. Girl on a train. The snooping girl on a train: The Sequel
  16. Maritime OT networks. A Primer
  17. The art of finding JTAG on PCBs
  18. Screwdriving. Locating and exploiting smart adult toys
  19. Dumping CC2540 Firmware. An IoT how-to
  20. Social engineering in the (festival) field
  21. Tearing down the Star Wars Battle Drone toy from Propel
  22. Bypass Windows auth & BitLocker with forgotten password function
  23. IoT: Convenience vs. Privacy. Where do you draw the line?
  24. Blockchain Implementation Security. A hardening how-to
  25. Brick or Bot? Solving OTA update issues
  26. Analysis: Draft US Senate IoT security bill
  27. “Alexa, use IoT to kill the power grid”
  28. Which IoT product should I buy?
  29. Update your PLC firmware. A reminder
  30. Adult IoT toys. Privacy invasion or worse?
  31. IoT security testing methodologies
  32. Project Dumb2Smart. How to build a secure IoT device. Part One: Dumb
  33. Could ‘Right to Repair’ heighten the risk for IoT and smart devices?
  34. UnBrickerBot? XiongMai fix Mirai DVR security issues… and fail
  35. Obfuscating consumer IoT hardware. Is it worth it?
  36. Petya/NotPetya. What you need to know
  37. Cyber Mum Vs Cyber Daughter
  38. Home Wi-Fi routers. Is yours secure?
  39. What did Mirai Miss? Making a better, bigger botnet
  40. Hacking wireless house alarms
  41. IN THE NEWS: BBC Click. The IoT at Dover Castle
  42. IN THE NEWS: Samsung’s S8 Iris and biometric revocation
  43. What I learned about managing worm outbreaks… 14 years ago
  44. WannaCry ransomware. It’s not all bad news
  45. How to reverse engineer MSWord malware
  46. Responsible disclosure didn’t work? How to get an IoT vendor to take notice
  47. Faster EEPROM firmware reads? Use a Pi!
  48. Girl on a train. The snooping girl on a train
  49. Hacking tractors is a thing. Is it the start of something else for connected cars?
  50. Decoding React Native creds on Android
  51. Keep your IoT schematics private
  52. IoT Aga. Cast iron Security Flaw
  53. Vulnerable Wi-Fi dildo camera endoscope. Yes really
  54. Nifty XSS in Annke SP1 HD wireless camera
  55. Jurassic Poke: Hacking a Dino toy
  56. In The News. DW TV. Driverless/connected car security
  57. LAN surfing. How to use JavaScript to Execute Arbitrary Code on Routers
  58. Weeping Angel / Fake OFF for Android TV
  59. Weeping Angel. Old News?
  60. No Genesis Toys, My Friend Cayla can be hacked even if you do follow the instructions!
  61. You can have your cookie and eat it!
  62. CloudPets data breach
  63. Pathway to driverless cars. UK law and liability.
  64. PTP brief UK Government on Cyber Security and call for IoT legislation
  65. MyFriendCayla banned. Are all listening Bluetooth devices set for the bin?
  66. Our Friend Cayla: No Longer Welcome in Germany!
  67. Help users spot phishing. Tag fake “internal” emails for them
  68. Screw Cayla: Use Chromecast for rogue Amazon Echo voice control!
  69. Secure all the things with other things via the Blockchain!
  70. End of the line, Internet of Things
  71. How to avoid blowing your privacy online
  72. Leaked DVR creds added to the IoT Fail list
  73. Who wants a hairbrush that’s connected to the internet?
  74. Edimax Wi-Fi Extender can disclose your WPA key
  75. Christmas lights. Festive security issues?

2016 79

  1. BMW integrates Alexa / Echo. Did I read that right?!
  2. Just in time for Christmas- the Cayla reminder
  3. TalkTalk router hack. Consumers, what should you do?
  4. IoT Encryption: The challenge of missing entropy
  5. My Friend Cayla wakes up and smells the lawsuits
  6. TalkTalk and other ISPs need to replace customer routers urgently
  7. TR-064 worm. It’s not Mirai and the outages are interesting
  8. Password stuffing: How to avoid breaches from password re-use
  9. Can Linux really be owned by holding the Enter key?
  10. Netgear EX7000 Wi-Fi Range Extender. Minor XSS and Poor Password Handling
  11. Filling in gaps in Mirai. It’s about DVRs, not cameras
  12. Can’t get data onto that machine? Download a tunnel client over DNS
  13. The Wi-Fi enabled LG air conditioner
  14. Scripting Metasploit to exploit a group of hosts. A how-to.
  15. What is Mirai? The malware explained
  16. Too little, too late. IoT vendors wake up and smell the coffee. …and the lawsuits
  17. Smart Fridge. Dumb idea?
  18. A “Neet” CSRF to Reverse Shell in Wi-Fi music streamer
  19. Optimising Mirai: A better IoT DDoS botnet?
  20. Yet another vulnerability in the Smarter Wi-Fi Kettle
  21. IoT DDoS – we haven’t seen the half of it yet. Nor have utilities…
  22. ASUS RT-AC66U router. A couple of bug fixes
  23. Attacking Android through custom updates
  24. BT Wi-Fi Extender. Multiple security issues. Upgrade ASAP
  25. Argos MyTablet FUBAR
  26. CSRFing Facebook games
  27. All your video are belong to us part 3. The D-Link 932L webcam
  28. Sandbox vuln in Tales of Maj’Eyal
  29. How to abuse SSH keys
  30. Stupidly insecure electronic / RFID door lock
  31. wigle.net suppresses Mitsubishi Outlander Wi-Fi hits
  32. Samsung’s smart camera. A tale of IoT & network security
  33. Thermostat Ransomware: a lesson in IoT security
  34. Smarter Coffee machines still being found unconfigured
  35. Home security camera isn’t secure. SpotCam in the spotlight
  36. Symantec endpoint protection. Update now!
  37. All your video are belong to us part 2. The TP Link TL-SC3230’s CSRF
  38. All your video are belong to us. The Foscam webcam
  39. Hacking the Mitsubishi Outlander. Working out the protocol
  40. Hacking the Mitsubishi Outlander PHEV hybrid
  41. Moodle e-Learning platform vulnerability
  42. Snooping Sony Bravia TV
  43. How I can gain control of your TP-LINK home switch
  44. An interesting route to domain admin- iSCSI
  45. Discrimination by telematics?
  46. RATing through the Steam Workshop
  47. Advice for IoT device manufacturers
  48. Snooping where the sun doesn’t shine
  49. BBC Panorama. How we hacked the house
  50. How-to subvert Android backups to export sandboxed app files
  51. XSS in SAP Business Intelligence Documents
  52. Mobile App Tips. Dealing with iOS and device requirements
  53. DOM XSS in iThemes Security Pro
  54. How a Pentester books a Squash court
  55. Another (un)smart Smarter app
  56. How we made the listening-in Android app
  57. How to defend against Pass-the-Hash (PtH) attacks
  58. DIY: How to build your own host-based IDS (HIDS) using OSSEC
  59. Apps and Après. Skiing and privacy
  60. New Chromecast & Chromecast Audio. Have they fixed their hijacking issue?
  61. BLN’s IoT Forum. What went down
  62. Are your phones listening to you?
  63. How to exploit XSS with CSRF
  64. glibc stack-based buffer overflow. What you need to know: UPDATE
  65. Pwning CCTV cameras: Update
  66. glibc stack-based buffer overflow. What you need to know
  67. PowerShell and VBScript: Getting full DB access via restricted desktop apps
  68. Cisco ASA Remote Code Execution – Buffer Overflow in IKE code
  69. When VTech meets the GDPR
  70. Pwning CCTV cameras
  71. How to reverse Wyse terminal password crypto: Method Two
  72. How to reverse Wyse terminal password crypto: Method One
  73. Why I think that U.S. house is hounded by phone trackers
  74. Reading Atmel AVR MCUs
  75. Who is tracking your run? Run and bike activity tracking app privacy issues investigated
  76. Steal your Wi-Fi key from your doorbell? IoT WTF! UPDATE
  77. Steal your Wi-Fi key from your doorbell? IoT WTF!
  78. Star Wars BB-8 IoT toy: awesome fun, but can it be turned to the Dark Side with this vulnerability?
  79. Wi-Fi HaLow 802.11ah for IoT. 802.11uh-oh?

2015 90

  1. OWASP Birmingham IoT Hackathon
  2. Why buying a smart toy for a child might be the craziest thing you could do
  3. Vtech Innotab Max file extraction: Finding the Superblock
  4. VTech Innotab Max: it’s getting even worse! Apps run in debug mode
  5. VTech Innotab Max vulnerable to trivial data extraction
  6. Collateral Damage: Top 5 Reasons You Should be Scared of Your Customers
  7. New Furby Teardown
  8. New, easier ways to make My Friend Cayla swear
  9. The IoT: Innovation or Exploitation?
  10. Yet another Lovense smart vibrator flaw
  11. Hacking a Wi-Fi Coffee Machine – Part 1
  12. Some simple security advice for computer and smartphone users
  13. What if your fridge said “no”? What if indeed?
  14. Concerned about KeeFarce? Don’t be. Why you should still use a password vault
  15. The TalkTalk breach, Ken Munro will be on the BBC later…
  16. New Wi-Fi kettle, same old security issues? Meh.
  17. Tonight’s CSI Cyber: implausible Marla talking doll hack. Fiction stranger than truth for once
  18. Hacking the Aldi IP CCTV Camera (part 2)
  19. Microsoft, phishing emails, and lessons to learn
  20. Should I enable encryption my Android handset?
  21. How to get Windows to give you credentials through LLMNR
  22. Android Lock Screen Bypass
  23. CESG and CPNI put passwords back in the spotlight. Have they got it right?
  24. 44CON London: Our IoT Security Workshop
  25. Tweaking nmap for hostile networks. A How-to
  26. Pen Test Partners IoT workshop at 44CON London
  27. How do you know that you aren’t compromised?
  28. Grab the UI lock password from McAfee A/V, kill the service, send in the malware
  29. How to extract sensitive plaintext data from Android memory
  30. Hacking DefCon 23’s IoT Village Samsung fridge
  31. AirDrop and Cyber Flashing, what’s the deal?
  32. Inside the spy tank; a hardware review.
  33. Denial-of-Service bug in BIND
  34. How to create poisoned Office documents for your staff awareness training – part 2
  35. Going to DefCon 23? Come to our IoT Village workshop!
  36. How to create poisoned Office documents for your staff awareness training – part 1
  37. How to hack an app enabled device to make it truly internet enabled
  38. Android debug mode and apps. A cautionary tale
  39. Hydra the logon cracker, a brute-forcing how-to user guide
  40. Basic safety tips for mobile devices
  41. The tiniest PHP system shell ever?
  42. Oracle wants you to run vulnerable Java to remove vulnerable versions of Java
  43. Finding wireless kettles with social networks
  44. Abusing software updates. GoPro Studio desktop app: Samsung keyboard app-style fail
  45. Shiva, the spam honeypot. Tips and tricks for getting it up and running.
  46. Yet another attack against the iKettle wireless kettle. Rumpy pumpy and fire alarms?
  47. My Friend Cayla. Updated app; Updated security fails. How to make her swear (again!)
  48. Change your password to smiling, winking, pensive, sleepy….
  49. Common coding fails when writing Android mobile apps
  50. Why you’re better off buying expensive smart scales
  51. CVSSv3. What’s changed? …or why even bother?
  52. Extracting your WPA PSK from bathroom scales
  53. Hacking kettles & extracting plain text WPA PSKs. Yes really!
  54. Infosecurity Europe 2015 round up
  55. GoPro Wi-Fi issues could mean stolen video, or worse…
  56. Short mobile PINs ARE bad, but I hate vendor FUD more!
  57. Cyber liability insurance. Will your underwriter wriggle out of the claim?
  58. Thought you had seen FUD? Now see this: a rock can protect your computer from viruses
  59. Why I hate named vulnerabilities
  60. Ethical disclosure and the Internet of Things
  61. Why you need to make your passwords more complex
  62. Zero-code platforms? More like zero-clue platforms
  63. Honeypots; a usage guide
  64. Ryanair. A timely reminder why Europeans need First Party Cyber Liability Insurance
  65. How to read from an EEPROM
  66. MS15-034. What you need to know
  67. Hacking the IP camera (part 1)
  68. Move over SHA-1, SHA-2 is coming. Here’s the why and the how
  69. Protecting yourself from your customers
  70. DIY dual boot Nexus tablet; make your own mobile test rig with NetHunter
  71. EAP-TLS: Where Mac security is worse than Windows
  72. Messing around with dildos. How to drive a vibrator with RealTerm
  73. Apple watch. A must-have or another personal security nightmare?
  74. Samsung TV voice encryption UPDATE: Fixed, but not quite…
  75. The lowdown on the SKIP-TLS and FREAK flaws UPDATE
  76. The lowdown on the SKIP-TLS and FREAK flaws
  77. Biometric revocation not an option
  78. Speech recognition mobile assistants, the lowdown starts here
  79. Is your Samsung TV listening to you? – UPDATE
  80. The Right Way To Do Session Management
  81. Fight! Fight! Hello Barbie vs My Friend Cayla
  82. Is your Samsung TV listening to you?
  83. Exploiting SUID Executables
  84. Cracking Android passwords, a how-to
  85. Making children’s toys swear
  86. RC4 cipher considered harmful?
  87. How to test wireless systems: A step-by-step guide (part 2)
  88. Are your smart weighing scales lying to you? Quite possibly (part 2)
  89. Are your smart weighing scales lying to you? Quite possibly (part 1)
  90. How to test wireless systems: A step-by-step guide

2014 103

  1. Visual Basic for Applications and the dangers of allowing Office macros
  2. Pwning git: A Proof of Concept (PoC)
  3. The internet of toys, and why we’re holding back this Xmas
  4. Git client – time to patch!
  5. Google’s No CAPTCHA reCAPTCHA, what we think
  6. Data tethering on mobile devices – what are the risks?
  7. Hacking Oracle Reporter- A how-to
  8. Bring Your Own Device or Bring Your Own Security Disaster? Some simple MDM policy advice
  9. Protocol vs Implementation. Why MS14-066 and SChannel got my goat
  10. Patch management, it’s sexy, here’s why
  11. App creep: Facebook security issues
  12. The spoofed number phone call scam
  13. Using nfsshell to compromise older environments
  14. Tearing down and reverse engineering Android (toys)
  15. Using hexdump analysis for firmware extraction: A how-to
  16. Efficient Password Cracking Where LM Hashes Exist for Some Users
  17. Critical SQL Injection Vulnerability in Drupal 7.0-7.31
  18. POODLE SSLv3 Redux: How to fix it
  19. Further Rockchip Android brokenness
  20. BBC article: Prevent devices being remotely wiped, here’s how to do it properly
  21. First Hudl2 Teardown?
  22. Using Applocker to protect your users from themselves, and you from your users
  23. Shell Shock: What it is, and what you can do
  24. Who watches the watchmen? A social engineer’s cautionary tale of spy watches
  25. Nmap for Sysadmins
  26. Socat-fu lesson
  27. Second hand budget Android tablets spark privacy and online safety concerns
  28. Is a remote wipe any better than a factory reset on an Android device?
  29. Recovering data from ‘wiped’ Android devices: A How To Guide
  30. More on tuning John the Ripper
  31. Custom charsets and rules with John The Ripper and oclhashcat
  32. Today’s BBC Article: Securing your nudie selfies
  33. Aldi Lifetab also vulnerable to data recovery from memory
  34. BBC Article: Tracking smartphones using Wi-Fi emissions
  35. New Rockchip firmware being released, but who is going to flash my grandma’s tablet?
  36. Top 10 ways to compromise your mobile security that you’d never believe
  37. Tesco Hudl 2 – our wish list
  38. Top 10 stupidest ways we’ve got domain admin
  39. Yes, really. A car review on a pen test blog. It’s topical, honest!
  40. Advanced traffic interception for mobile apps using Mallory and Burp
  41. Adobe, eBay and other breaches. Should you change your password? Yes, but only if it’s a lousy password
  42. Further IBM Maximo Asset Management Vulnerabilities Reported
  43. Shiny New Pen Test Report! So What…
  44. Don’t use PIN Patterns on Android
  45. ICO makes a mockery of disclosure
  46. Sketchy BIS Report Data, FUD, and Why You Need Cyber Liability Insurance
  47. Auditing AWS Security Groups – Part 2
  48. Hacking Sat Navs
  49. Unicode – the future of passwords? Possibly…
  50. Auditing AWS Security Groups
  51. Key Sniffing with Android
  52. Postal Services Breached, customers urged to change house numbers urgently
  53. Is everything actually broken? Software will always be flawed, but here’s what you can do about it
  54. One-way password hashing is essential, but it’s even better if you select the right algorithm
  55. Old pre-smartphones from eBay – Blackmail Central!
  56. How to scrape plain text from an encrypted Android phone OR why most MDM products just don’t cut it
  57. CorrectHorseBatteryStaple isn’t a good password. Here’s why.
  58. How to hardware hack Android over UART
  59. BMW i3 password issues
  60. The truth behind vulnerabilities, a missive from the trenches
  61. How to Hack the Hudl – We give Rockchip a good seeing to
  62. Defeating corporate anti-virus
  63. Quick and dirty binary analysis using sandboxes
  64. Shameless self promotion – Pen Test Partners at Infosecurity Europe 2014
  65. SayNoTo0870.com SayYesToCreditCardFraud.co.uk..?
  66. Keep your Android versions updated. Why? If you have to ask…
  67. Wildcard SSL certificates, not good value any more, my Heartbleeds
  68. Security vs the community: you’re doing it right!
  69. Heartbleed in the wild, the call of duty
  70. New Zeus variant may get lost in the clamour of Heartbleed
  71. WTF Heartbleed? Don’t make me move all my HTTPS services to HTTP and ditch SSL completely
  72. Heartbleed OpenSSL bug- overview and fixes
  73. WAF (Web Application Firewall) Testing for dummies
  74. Why you might want to rethink providing free wi-fi
  75. Top Tips For Internet Privacy
  76. Scanning for Default Files
  77. Create a honeynet, dupe your attackers, build threat intelligence
  78. Hacking Computer Games
  79. Connected cars, signals systems, mischief and European drivers. These scare me.
  80. 8 ways to be great at password management, and protect your customers
  81. Passwords: A step-by-step analysis of breaking them
  82. Need to avoid a honeypot? Here’s how
  83. Webcam Security: I can SEE you!
  84. Keylogging domain creds; who needs a hash? Lock the victim’s workstation to order and snarf them immediately
  85. Threat Intelligence: Log File Hacking
  86. Password re-use: the game is changing, SO USE A PASSWORD VAULT!
  87. Can you really wipe a mobile device remotely?
  88. DIY – Build Your Own “Pwn Pad” Style Nexus 7 Hack Box
  89. Analysis of reported Tesco account and password data
  90. How can I be tracked using my mobile devices? Here’s how…
  91. It’s Safer Internet Day and we’ve got six tips to help you stay out of trouble
  92. Cyber liability insurance, you need it, and here’s why…
  93. Hacker High School
  94. There are “pen tests” and then there are “PEN TESTS”…
  95. Encryption and cloud based storage
  96. Passwords, passwords, passwords (repeat)
  97. Belt AND Braces: Web apps and mod_security
  98. Data Exfiltration: DNS tunnelling using iodine
  99. Test early, test often: 6 things you should know about application security testing
  100. IBM Maximo Asset Management Vulnerability Reported
  101. Abusing Group Policy Preferences to Elevate Privileges
  102. Web application Unicode character transforms
  103. NSA – Never Safe Again?

2013 26

  1. Hackey Phishmas!
  2. Cyber security kite mark being touted, but for what exactly? People? Passwords? Patches?
  3. iOS phone users still vulnerable to old PIN bypass vulnerabilities: Lesson – Update your stuff
  4. Transferring Data the Low Tech Way
  5. What we can learn from Meerkats?
  6. The Coming Revolution: Hardware attacks and the internet of things
  7. Brute Forcing Android PINs (or why you should never enable ADB part 2)
  8. Brute Forcing Android PINs (or why you should never enable ADB part 1)
  9. How to get into Information Security
  10. Backwards phishing with Unicode – edocinU htiw gnihsihp sdrawkcaB
  11. Is that a bug in your pocket or are you just happy to see me?
  12. How to remove IIS server response header banners
  13. Get your Macs back on track- Apple security for Windows experts
  14. The Salmon Fishing Bear Attack OR Grabbing password hashes off the network via NetBIOS
  15. The Antwerp hackers bundle demystified
  16. Clickjacking explained, in detail
  17. Patch Tuesday 08/10/2013- notable items
  18. DRM – The conundrum for protecting intellectual property
  19. Duplicate Passwords: Why IT Support Needs a Wake Up Call
  20. Git Extraction – Abusing version control systems
  21. Simple steps to stop Social Engineers
  22. How to reverse engineer a protocol
  23. Browser support for TLS 1.1 and 1.2
  24. What to do if you find yourself being DDoSed
  25. Why porn is an effective malware distribution mechanism
  26. DefCon21 Ruminations