Category: featured

This post is in conjunction with a project that can be found on my Github. There was a two hour workshop which covered the methodology live on stream, for the slides please see DVR Security Evolution. Results and observations for this project will be updated January 2021 on the Github project page. The current stage … Continue reading DVR Security Evolution

I have carried out a short talk which was aimed at the ladies of LLHS to go over some of the research I have undertaken in the past and give them resources to get started. Heres the link to the slides. Heres the link to the talk  The zoom presentation features my brief talk on … Continue reading LLHS – Starting out as a Security Researcher

44 con Workshop Overview: A 101 & upwards workshop on Radio Frequency Identification, tools, and how to make your own access control system. If you’re new to Arduino, RFID or basic electronics, this is the workshop for you! If you have stumbled upon this page o nthe internet and do not know what 44Con or … Continue reading RFID Hacking Tools Workshop (How to create your own Reader ) Requirements

To create your own RFID MFRC522 Reader please see the below links. These are to demonstrate the required parts. If you buy in larger quantity’s or source with longer delivery times you may get better deals. The links provide a framework to help guide you. Please note that these are affiliate based links, every purchase … Continue reading Make Your Own RFID Reader Shopping List

Had an awesome time being interviewed with the guys on the hacker couch at Hacker One’s #h1-702 event in Las Vegas   Big Shout out & thanks to @NahamSec and @stokfredrik for having me and @daeken on the hack-couch for @Hacker0x01 interview at the #h1702. I adore these guys, it was inspiring to spend time … Continue reading Hacker Couch Time @ #H1-702 event in Las Vegas

I would like to introduce you to some obfuscated malicious PHP files that I had recently found on a WordPress website. I’ve written a detailed report on the research and analysis process for the PHP Web Shell Hexedglobals.3793 variants, while this post is a how-to tutorial on the de-obfuscation.  In this article I will be … Continue reading How-to Tutorial: PHP Webshell De-Obfuscation

This article covers the analysis work undertaken on the Hexedglobals.3793 family of PHP based malware. The variants are: Kidslug, php.obfuscated!, php.malware.GLOBALS.003 and php.malware.GLOBALS.004. During my investigation I documented my process, steps taken and also put together a separate tutorial on the de-obfuscation of this web shell. I have also put some scripts together which helps … Continue reading Investigation of PHP Web Shell Hexedglobals.3793 Variants