Catégorie : Technique

A couple of years ago I flashed a captive portal onto an M5Core2 to see if I could phish a WiFi password sitting at my own desk. It worked on the first try, and that stupid little experiment never really stopped growing. Today it’s Evil-M5Project, a pocket-sized penetration-testing framework with more than 75 modules, running…

TL;DR A contactless card and a reader only talk when they are a couple of centimetres apart. A relay attack breaks that assumption: it carries the card’s live conversation over distance, so the card can sit in a pocket on a train while, across town, a terminal is talking to it and opening a door…

TL;DR The little digital price tags clipped to supermarket shelves look official, and we treat them that way: whatever number they show is the price, no questions asked. They update themselves wirelessly, so a store can change thousands of prices from a back office over a few minutes. What almost nobody realises is that on…

TL;DR Back in 2013 the researcher Samy Kamkar strapped a small computer to a drone, sent it into the air, and had it hunt down other drones nearby, knock their owners off the controls, and fly away with them. He called it SkyJack, and it looked like something out of a film. The reason it…

TL;DR A company can spend a fortune on the firewall at the edge of its network, the wall that keeps the internet out, and most of them do. Step over that wall, though, onto the office Wi-Fi or a network socket in a meeting room, and you often find a completely different place. The printers,…

TL;DR Your home router has a firewall, and it does one quiet, essential job: it lets your devices reach out to the internet while stopping the internet from reaching back in. That firewall is the single wall between the open internet and the camera, the printer, and the laptop on your network. The uncomfortable part…

TL;DR An AirTag is a genuinely clever little device: drop one on your keys, lose them in a taxi across the city, and a map still shows you where they are. It has no GPS and no SIM, just a tiny Bluetooth beacon and a year of battery, and it finds itself by quietly borrowing…

TL;DR You borrow a charging cable at a conference, or pick up a USB stick someone dropped in the car park, and you plug it in. In the first few seconds, just after your computer finishes recognising it, that little device can start typing on its own: a stream of keystrokes your machine obeys without…

TL;DR You tap your badge and the door clicks open, you wave your phone at a terminal and the coffee is paid for, and it all feels secure because it is contactless and everyone says these things are encrypted. The truth is that some of them are, and some are just a bit of plastic…

TL;DR When you press your garage remote or your car key, no secret travels down a wire. You broadcast a short radio message into the open air, and anything nearby can hear it. Whether that is a problem comes down to a single question: does the message change every time, or is it always the…

TL;DR On a normal Windows network, your own computer gives away credentials without you doing anything at all. When it cannot find something by name, it stops asking the official address book and instead shouts the question at the entire local network, and it trusts whoever answers first. An attacker just has to sit there…

TL;DR Every time you join a network, your device spends its first half-second asking the room a few basic questions: what is my address, who is my router, and who do I ask to turn a website name into a number? It then trusts the very first answer it receives, with no check at all…

TL;DR Here is the uncomfortable truth about your Wi-Fi: an attacker does not need your password, and they do not break the encryption either. They stand outside with a cheap gadget, knock one of your devices off the network for a split second, catch the automatic reconnection, and leave with a sealed mathematical proof of…

TL;DR You trust a Wi-Fi network for essentially one reason: its name looks familiar. Airport_Free_WiFi at the airport, DailyGrind_Guest at the cafe, your own network name at home. That single habit, trusting a name, is the entire weakness an Evil Twin exploits. An attacker stands up a second access point broadcasting the exact same name…

Introduction to the Karma Attack The Karma Attack represents a sophisticated yet alarmingly straightforward cyber exploitation technique. It banks on the commonplace and often overlooked behavior of wireless devices like smartphones, laptops, and tablets, which are programmed for convenience but inadvertently create a security loophole. The Basic Functionality of Wireless Devices To understand the mechanics…