Matt Brown's banner

Matt Brown

@nmatt0 • 11,754 subscribers

Principal Consultant @ Brown Fine Security | IoT Security Researcher | Soli Deo Gloria

Videos

Anya Rossi

sweetdream.ai

SweetDream.ai•Sponsored•Livecam

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

Exclusive private shows

1.2k viewers online

Private Show

Join now for exclusive access

Free preview available • Premium content

I bought an industrial radio controller made in China that transmits on unauthorized frequencies in the US. As it turns out, there are many of these knock off units being sold on ebay, Alibaba, etc. In order to safely test the units, I used an RF enclosure to be sure that these unauthorized signals were not transmitted outside of my lab environment. Using a USRP Software Defined Radio (SDR) I was able to observe that these radios transmit reserved for cell service and commercial aviation air-ground systems. Additionally, I was able to perform a simple replay attack on the controller signals to successfully actuate the receiver.

I bought an industrial radio controller made in China that transmits on unauthorized frequencies in the US. As it turns out, there are many of these knock off units being sold on ebay, Alibaba, etc. In order to safely test the units, I used an RF enclosure to be sure that these unauthorized signals were not transmitted outside of my lab environment. Using a USRP Software Defined Radio (SDR) I was able to observe that these radios transmit reserved for cell service and commercial aviation air-ground systems. Additionally, I was able to perform a simple replay attack on the controller signals to successfully actuate the receiver.

138,022 次观看 • 15 天前

Found this TINY flash chip on the DistrictCon conference badge and just had to remove it and dump the firmware 🤣 First time using my USON8 2x3 adapter

Found this TINY flash chip on the DistrictCon conference badge and just had to remove it and dump the firmware 🤣 First time using my USON8 2x3 adapter

137,555 次观看 • 8 个月前

Found a simple vulnerability the other day in a Chinese IoT camera. SSL communications were going out to a cloud server without validating the server certificates. This led us to be able to perform a man-in-the-middle attack and intercept the SSL communications.

Found a simple vulnerability the other day in a Chinese IoT camera. SSL communications were going out to a cloud server without validating the server certificates. This led us to be able to perform a man-in-the-middle attack and intercept the SSL communications.

119,420 次观看 • 10 个月前

We've got Opus 4.8 at home! Running DeepSeek V4 Flash Vision-Exp on 2 x DGX Spark with OMP. This is a mini-benchmark firmware analysis task I've been using to test out different models/harnesses. Opus 4.8 didn't find anything in this firmware that DeepSeek didn't. Thanks Mia

We've got Opus 4.8 at home! Running DeepSeek V4 Flash Vision-Exp on 2 x DGX Spark with OMP. This is a mini-benchmark firmware analysis task I've been using to test out different models/harnesses. Opus 4.8 didn't find anything in this firmware that DeepSeek didn't. Thanks Mia

25,804 次观看 • 1 个月前

Ever wonder how LTE-based IoT devices communicate over the internet? I modified a Chinese GPS tracker that is in common use in the US and got the cell modem to communicate with internet systems other than the GPS tracker's cloud servers.

Ever wonder how LTE-based IoT devices communicate over the internet? I modified a Chinese GPS tracker that is in common use in the US and got the cell modem to communicate with internet systems other than the GPS tracker's cloud servers.

92,871 次观看 • 9 个月前

Wanna find IoT vulns before you ever get your hands on the device? Download some firmware and lets go! In this video we show off how moria and mithril work together to identify, unpack and mine IoT firmware for secrets, insecure configs and more! Check out the tools at the links below! moria: mithril:

Wanna find IoT vulns before you ever get your hands on the device? Download some firmware and lets go! In this video we show off how moria and mithril work together to identify, unpack and mine IoT firmware for secrets, insecure configs and more! Check out the tools at the links below! moria: mithril:

15,264 次观看 • 1 个月前

There are lots of great tools out there for Software Defined Radios (SDRs). GNURadio. Universal Radio Hacker. So many more. BUT, did you ever wonder how these tools actually turn radio signals into digital data? The Ones and Zeros that we want to see? In my new video series, I'm pulling back the curtain on demodulation, the process of turning a radio signal into a digital one. We are going to use libuhd and write our own C++ code to do all the work. no shortcuts. no library calls for demod. Part 1: On-Off Keying

There are lots of great tools out there for Software Defined Radios (SDRs). GNURadio. Universal Radio Hacker. So many more. BUT, did you ever wonder how these tools actually turn radio signals into digital data? The Ones and Zeros that we want to see? In my new video series, I'm pulling back the curtain on demodulation, the process of turning a radio signal into a digital one. We are going to use libuhd and write our own C++ code to do all the work. no shortcuts. no library calls for demod. Part 1: On-Off Keying

32,672 次观看 • 4 个月前

Oneshot camera hacking.

Oneshot camera hacking.

44,994 次观看 • 11 个月前

More buffer overflow practice using Claude Code and Binary Ninja to assist.

More buffer overflow practice using Claude Code and Binary Ninja to assist.

30,555 次观看 • 9 个月前

I'm excited to announce the launch of my first training course: Digital Signal Analysis for Hardware Hackers! Check it out: Here is a bit of a preview into some of the things we do with logic analyzers in the training!

I'm excited to announce the launch of my first training course: Digital Signal Analysis for Hardware Hackers! Check it out: Here is a bit of a preview into some of the things we do with logic analyzers in the training!

11,521 次观看 • 9 个月前

没有更多内容可加载