Clik here to view.
Aurora: Ambient Lighting
If you just want to build, there is a build guide here there is also a Slack for a more interactive discussion if you just want to peak the code its on github. Ambient lighting has always been...
View ArticleClik here to view.
Picking apart an IOT Camera (Bloomsky)
A few years ago (many now as I see it was from 2014!) I got myself a pretty cool Kickstarter project called a BloomSky. Its a simple (but awesome!) device that you put on your balcony/somewhere with a...
View ArticleClik here to view.
Maltego As a Service!
Recently I was helping someone who wanted to get started building their own transforms, and after looking at the efforts they had to go through building the transforms, I thought there must be a...
View ArticleClik here to view.
WhatsApp Doc? Grabbing messages from WhatsApp web before they are deleted!
Overview One thing that always bugged me was if someone says something like “Oh wow you wouldn’t believe what happ- actually nevermind”. I am far too curious and I usually want to know what was going...
View ArticlePasteLert v2!
The Quick and dirty: New PasteLert lives at http://andrewmohawk.com/pasteLertV2/ Downloads: » Interface -> http://andrewmohawk.com/pasteLertV2/src/pastelertv2_Interface.zip » Cron Tasks ->...
View ArticleClik here to view.
Joomla 2.51 Blind SQL Attack
<responsible_disclosure> Before i discuss this, let me just say that the bug has been patched (was in 2.5.1) and at the time of writing this Joomla is already 2 increments away – 2.5.3 is...
View ArticleClik here to view.
FireBridges, proxies that burn!
Overview I’ve always been semi interested in botnets/trojans and targetted attacks and the way they get their data in and out and how the command and control centres work. One of the things i’d...
View ArticleClik here to view.
Halloween: How to over engineer a mask
Over the years, halloween has always been fun for me, I basically wish I was American so that I could dress up excessively every year! This year I decided that I would like to build my own costume....
View ArticleClik here to view.
HackFu 2016 Writeup
First off let me just say a big thank you to the MWR guys who put this CTF together, usually I don’t partake in CTFs because the skillset required is usually out of my grasp (IANAP). To have developed...
View ArticleClik here to view.
Hacking fixed key remotes with (only) RFCat
Introduction Its been absolutely ages since I’ve posted anything on the blog, not that I havent been doing things, just really not many things I felt good enough to write an entry about. I got a lot of...
View ArticleClik here to view.
ZaCon V Badge [1/2]: Build Time
I realise I should have done this entry a little sooner, but as everyone should be well aware of by now, I am lazy. Also I moved to Cape Town just after ZaCon V which proved rather time consuming!...
View ArticleClik here to view.
Kingphisher: Semi-automated phishing
It has been absolutely ages since I have written a blog post – genuinely I really havent simply been slacking off, i’ve just been busy! Anyway, figured it was time to do a writeup on some stuff I have...
View ArticleClik here to view.
Arduino Watering System: Update
This is just an update on the Arduino watering system, everything seems to be going well whilst I am away (I am away for ~a month, till the end of Blackhat / Defcon). In winter the plants don’t require...
View ArticleClik here to view.
Magnetic Stripes: Part 2 (Attacking)
I really should have written this after ZaCon (november last year), but I’m lazy. However I have been asked to give a brief overview of the same talk at ITWeb this year so I figure I may as well finish...
View ArticleClik here to view.
Bypassing LF Entry Systems
Its taken a lot of motivation to start writing this, and I hope its okay, I have a mental block that I need to write this and the second post about magstripes before moving on to some new things with...
View ArticleClik here to view.
Hacking fixed key remotes
Previously I discussed using my RTL-SDR to merely listen for analog audio signals. In this entry I’ll discuss using it to decode digital signals (this example on fixed remote signals often used for...
View ArticleClik here to view.
Magnetic stripes Part 1
Intro So its been nearly a month since I last put a blog post up and I have been working on some stuff in my free time between work (been traveling to the US and took a weekend off to visit some...
View ArticlePasteLert v2!
The Quick and dirty: New PasteLert lives at http://andrewmohawk.com/pasteLertV2/ Downloads: » Interface -> http://andrewmohawk.com/pasteLertV2/src/pastelertv2_Interface.zip » Cron Tasks ->...
View ArticleClik here to view.
Joomla 2.51 Blind SQL Attack
<responsible_disclosure> Before i discuss this, let me just say that the bug has been patched (was in 2.5.1) and at the time of writing this Joomla is already 2 increments away - 2.5.3 is...
View ArticleClik here to view.
FireBridges, proxies that burn!
Overview I’ve always been semi interested in botnets/trojans and targetted attacks and the way they get their data in and out and how the command and control centres work. One of the things i’d usually...
View Article
