Attify blog · IoT security research

Firmware, hardware, radio and the bugs that live between them.

Write-ups from the bench: firmware reversing, hardware interfaces, wireless protocols, exploitation and the tooling we build along the way.

Post

To Boot Or Not To Boot – Das U-Boot

Introduction In this post, we will be describing the bootloader that goes by the name of Das U-Boot. We will delve into the following Das U-Boot features, including: - Das U-

6 min read Read →
bootloader

To Boot Or Not To Boot

A bootloader is simply the part of the system that is used at start-up to assist in the process of successfully starting the system and loading the operating system kernel. Read more.

4 min read Read →
ghidra

Analyzing bare metal firmware binaries in Ghidra

Analyzing firmware binaries is often different from analyzing a PE or ELF file which have a definite structure. Reverse engineering firmware binaries often entails going through the datasheet, compiler headers to set up the base address and memory map correctly.

8 min read Read →
CTF

Flare-On 6 CTF WriteUp (Part 11)

This is the eleventh part of the Flare-On 6 CTF WriteUp Series. 11 - vv_max The challenge reads > Hey, at least its not subleq. Subleq is an esoteric language. The

7 min read Read →
CTF

Flare-On 6 CTF WriteUp (Part 10)

This is the tenth part of the Flare-On 6 CTF WriteUp Series. 10 - Mugatu The challenge reads Hello, I’m working an incident response case for Derek Zoolander. He clicked a

9 min read Read →
CTF

Flare-On 6 CTF WriteUp (Part 9)

This is the ninth part of the Flare-On 6 CTF WriteUp Series. 9 - reloaderd The challenge reads This is a simple challenge, enter the password, receive the key. I hear that

5 min read Read →
CTF

Flare-On 6 CTF WriteUp (Part 8)

This is the eighth part of the Flare-On 6 CTF WriteUp Series. 8 - snake The challenge reads > The Flare team is attempting to pivot to full-time twitch streaming video

4 min read Read →
CTF

Flare-On 6 CTF WriteUp (Part 7)

This is the seventh part of the Flare-On 6 CTF WriteUp Series. 7 - wopr The challenge reads > We used our own computer hacking skills to "find" this AI

11 min read Read →