News RSS

Birb, pentest, web -

The setting As a pentester, I've been mostly dissatisfied with the major web fuzzing / discovery tools. With recurring issues ranging from "too tedious to setup (or use)", to simply "way too slow", about two years ago I started thinking I should maybe do something about it. The idea I decided to create a new tool, initially mostly for finding web directories, but with the ultimate intent of having a general web fuzzer. The requirements were clear: * must be easy to run (single binary) * simple to use with clear help * flexible enough to address most scenarios * quick...

Read more

ethernet, injection, PoE, Sparkplug -

A delicate situation Sometimes you need to hook something behind a device in a corporate network. Unfortunately, sometimes that device turns out to be an IP phone or video camera only powered through PoE. Unless there's a spare power supply lying around that just happens to match the device, this can mean the difference between a successful intrusion or an embarrassing moment. An easy solution The solution to this is the Sparkplug - a tiny PoE injector capable of powering devices up to 15W. On one side, hook up the included wall adapter and the PoE device. On the other...

Read more

embedded, TTL232, UART -

Yes, they still exist... Every once in a while I come across some device that actually talks real RS-232. This is a pain because it means I have to pull out an old USB to RS-232 cable. Most electronics today expose UARTs (serial ports) at TTL levels of 3.3V or 5.0V. This is why the Nautilus USB UART features a switch allowing you to select between these two most common voltages. Simple and versatile I wanted something more versatile than a single-unit USB to RS-232 cable, so I went ahead and designed just the RS-232 to TTL part.  The male pins accept...

Read more

3D print, case, embedded, enclosure, microcontroller, Nautilus, shell, UART, usb -

The Nautilus is a dual voltage USB UART - a nice little tool to have whenever you need to pop a shell on some target electronics board, be it a router, embedded Linux system or some microcontroller-based device. Twitter user Rémy GILLET (@remyglt) has taken the time to design a beautiful 3D printed case, which he was then kind enough to share with everyone. The results look very nice, below is a close-up of the orange version printed by @remyglt himself. I quickly printed mine in some glow-in-the-dark PLA, but I must say I still prefer the orange version from Rémy. This is what...

Read more

azban, delivery, injection, payload, usb -

The Azban is a great way to compromise systems. Write a few lines of shell script and plug the USB device into a computer to run your payload regardless of operating system or keyboard layout. However, there are many cases where it would be even better to fit the Azban device into a "legitimate" device's enclosure. For this reason, I decided to also offer a Slim version of the Azban device, designed around the form factor for most common commercial USB flash drive enclosures. An example is shown below, fitting the Azban Slim into one of these classic "spinner" style...

Read more