Hacking crypto (cryptography! 🤪) without hard math: how to find bugs in implementation.👨🏻💻🔏👩🏿💻🤔💥
Security researcher Matt Byrdwell, aka Nerdwell, in his four-part blog series presents a practical hacker’s view of cryptography. He claims that real-world vulnerabilities rarely come from breaking math - but from breaking implementations.
The author goes through public security research publications and known vulnerabilities, presenting examples and deep dives into different ways to approach cryptography, depending on where and how it’s implemented (blockchain and cryptocurrencies included)
In a nutshell: The harder something looks, the less people test it. As a result - more bugs, less competition, higher rewards.
No matter how good you are at security research or hacking (or math), I recommend you read the articles below. You’ll find some interesting and useful ideas there. Enjoy - and if you know someone who might be interested as well, please share!
More details:
Hacking crypto
Part I [Blog]: https://www.bugcrowd.com/blog/hacking-crypto-part-i/
Part II: Hacking blockchains for fun and profit [Blog]: https://www.bugcrowd.com/blog/hacking-crypto-part-ii-hacking-blockchains-for-fun-and-profit/
Part III: Hardware [Blog]: https://www.bugcrowd.com/blog/hacking-crypto-part-iii-hardware/
Part IV: Web and mobile applications [Blog]: https://www.bugcrowd.com/blog/hacking-crypto-part-iv-web-and-mobile-applications/
目录
最新
- Hacking Kia and Nissan cars remotely: the status of famous vulnerabilities after two years. 🚗🌎📱🔓🤑
- Hacking serial-to-IP industrial devices from Lantronix and Silex: attacking OT from the internet. 🏭📦🌐💉👷♂️
- Unlock your car’s hidden hacking potential: how to enable “Developer Mode” in Android Auto. 🚘📱👈🤫👑
- Hacking access-control systems with an old-school sniffer: a creative way to jump the fence. 🚪🔐👃💳🔓
- Hacking the Google Fast Pair protocol: Connect to 68% of headphones, earbuds, and cars (?).🎧🚙ᯤ👨🏻💻😱
- Hacking the diagnostics of Freightliner Cascadia heavy trucks: Denial-of-service attacks. 🚛🩺📊💉🔴
- Crash course in RF security research for hackers: cheap hardware and open-source software. 👨🏻💻📻၊၊||၊🎧👾
- Cybersecurity attacks on SIM cards: a wealth of useful info about SIM and cellular network hacking. 📱🎫👥📲💰