tag:blogger.com,1999:blog-80836428378090478332024-10-07T06:02:24.331+01:00all about computer insecurity, technology & personal projects.Matthew Hackerhttp://www.blogger.com/profile/14325216514856584940noreply@blogger.comBlogger7125tag:blogger.com,1999:blog-8083642837809047833.post-91474831522225214842011-11-07T11:14:00.025+00:002011-11-07T19:11:46.645+00:00

I began a research project into a popular consumer broadband device over 12 months ago. The end result of that research was the construction of a 0day exploit that allowed for remote root compromise of a widely deployed consumer device, the SAGEM F@ST2504 Sky Broadband router (photographed to the right) which was provided to all Sky Broadband consumers since 2007. Additionally it raised concerns

Matthew Hackerhttp://www.blogger.com/profile/14325216514856584940noreply@blogger.com0tag:blogger.com,1999:blog-8083642837809047833.post-35630079954033211402011-09-30T10:44:00.012+01:002011-09-30T15:21:07.811+01:00

I came across a copy of FxGaurd Windows Login software and was immediately intrigued by it's claims of "Computer Access Control with Face Recognition Technology". I purchased the software and eventually managed to get a licenced copy of FxGaurd Windows Logon 4.0 installed on my Laptop. The software offers the ability to replace the GNIA screen to Windows desktops with a WebCam capture that

Matthew Hackerhttp://www.blogger.com/profile/14325216514856584940noreply@blogger.com0tag:blogger.com,1999:blog-8083642837809047833.post-69121093653298555772010-06-09T12:50:00.009+01:002010-06-09T20:24:36.384+01:00

Late last year there was wide-spread exploitation of a default SSH password on jail broken iPhone devices. This resulted in the creation of an SSH worm by IkeeeX and numerous other exploits and malicious applications. At the time I was talking with some friends and we thought it would be cool if a rogue AP performed the default SSH authentication and automatically obtained the information out of

Matthew Hackerhttp://www.blogger.com/profile/14325216514856584940noreply@blogger.com0tag:blogger.com,1999:blog-8083642837809047833.post-3395648626770386212009-08-09T11:21:00.013+01:002009-08-19T17:52:07.115+01:00

I recently undertook a small research project while evaluating security of Thin Client devices during a Penetration Test. What I found during my assessment was that a handful of Thin Client devices were exposed to a number of security short-comings in the management and commonly deployed topology design. The project resulted in the creation of a white paper discussing security problems and

Matthew Hackerhttp://www.blogger.com/profile/14325216514856584940noreply@blogger.com0tag:blogger.com,1999:blog-8083642837809047833.post-29641472693348243952009-06-06T17:56:00.030+01:002009-07-08T13:29:53.273+01:00

I undertook a small wardrive recently from a popular retail park in Manchester, England to a landmark hotel located within the city centre. The route was chosen as it encompasses a small area of mainly residential buildings, a large retail park, several areas used mainly for industry and a number of offices. Using a 12DBi directional antenna, a Garmin eTrex GPS, a copy of Kismet running on

Matthew Hackerhttp://www.blogger.com/profile/14325216514856584940noreply@blogger.com0tag:blogger.com,1999:blog-8083642837809047833.post-57561009943192211492009-03-24T14:36:00.017+00:002009-05-22T14:08:11.822+01:00

I have made available the current distribution of Project RogueAP. The firmware, described in more detail in an earlier post, is still in experimental stages (bugs) but has most of the desired functionality. The three main functionalities most desired are:It does not bridge to a neighbouring Wifi, this is popular for "phishing" attacks using Evil Twin AP's.It does not do any SSL spoofing /

Matthew Hackerhttp://www.blogger.com/profile/14325216514856584940noreply@blogger.com0tag:blogger.com,1999:blog-8083642837809047833.post-7420164110254318822009-02-03T19:00:00.026+00:002009-05-11T13:46:34.422+01:00

Project RogueAP is currently underway - you can keep up with my progress on twitter & here. The project is a small personal project to create malicious firmware for the Linksys WRT54GL that behaves as an Evil Twin AP out-of-the-box. The project makes use of OpenWRT and modifies the base installation to be more suited for nefarious purposes, such as the removal of DNSmasq & BusyBox telnetd

Matthew Hackerhttp://www.blogger.com/profile/14325216514856584940noreply@blogger.com0