PenturaLabs

My Robot Has WiFi!

Wireless communication using Bluetooth! Thanks to the Adafruit EZ-Link!  Basically that tiny board sticking out on top is a Bluetooth Serial-Link, allowing me to remove the cable that binds the robot to my PC / MAC.  Now I cannot only program the robot wirelessly, but if I choose to, I can send it commands wirelessly over the air – thus completing Asimov’s second rule of robotics (if you don’t…

It Can See; Giving Your Bot Sight!

Previously we unveiled our love for the Arduino and the Zumo Shield that gives us a massive head start to building our own robot army.  The basic shield has a Zumo reflectance sensor array for primarily line following, and an LSM303DLHC accelerometer & manometer (magnet-o-meter) for navigation.  But a lot of the remaining Arduino pins are not used, so this gives us the capability to add more tech…

This Heartbleed Information Disclosure Vulnerability has pretty much been covered all over the internet today (8th April 2014).  As a one-page-stop summary, please read below:

An online site exists to check vulnerabilities: http://filippo.io/Heartbleed/

Source Code available at: https://github.com/FiloSottile/Heartbleed

A python script (thats much better): http://s3.jspenguin.org/ssltest.py

A…

Rise of the Machines: Arduino Bots

Robotics Week

Its robotics week (April 5th – 13th) 2014 (http://www.nationalroboticsweek.org), on Arduino Day (29th March 2014) I posed the question “What will you Build?”.  Well here in the Pentura office, we went out and bought some Zumo Shields from Pololu.  The shields are also available from our favourite electronics provider Adafruit.  The shield is a quick an easy insertable arduino…

Proxmark3 vs Ultralight C

There have been no secrets this week while I’ve been trying to add Mifare Ultralight C support to the Proxmark. Ultralight C cards are HF (13.56MHz) tags that are part of the Mifare family.  This week has been an interesting learning process, and it has corrected some misconceptions I had about the card.  For those interested you can follow my progress…

iClass Is Not Enough

Hacking iClass for Fun, Door-Entry and a Free Lunch.  iClass has been broken in the public domain since approximately 2010 when Meriac published his findings at the 27th CCC in Berlin with the Heart of DarknessWhite-paper.  But why does there appear to be limited support for hacking these cards within the community? The cards have been in the industry since 2001, boasting stronger security then…

Proxmark3 vs Kanotech ioProx

Earlier today we released a patch into the Proxmark3 community for initial support of ioProx tags from Kanotech.  Current operations are FSK-demodulation and card/tag cloning.

Not much is revealed about this type of tag, and only limited data can be found on its data sheet.  Kantech state that readers/cards are compatible with standard 26-bit Wiegand and Kantech Extended Secure Format (XSF). But…

RFID Wallets/Sleeves. How much Security do they provide?

With the increasing amount of RFID technology creeping into everyday life.  Just how much data can be obtained from your wallet?  At Pentura we undertook a small experiment where using standard off-the-shelf products, we would attempt to obtain personal information leaked from RFID enabled devices:

UK Passport

UK Bank Cards Debit/Credit

Access Control Tokens

Our experiment used standard…

Ubertooth – Updated for 2014!

Earlier I noticed this tweet on my twitter feed:

Ubertooth release: https://t.co/cCYHNf34Yc I know it’s been a long time coming, I promise not to leave it so long next time.

— Dominic Spill (@dominicgs) February 20, 2014

So I thought I would walk you through the update, which has improved Operating System support, improved Bluetooth Low Energy (BTLE) support, and GitHub integration to make…

Whitehatsec's Aviator

A new web browser is brought to us from Whitehatsec called Aviator, built for speed, security and…

Mainframes These Dinosaurs are Not Extinct as You May Think....

Mainframes still exist at the core of many large or enterprise organisations.  Especially within…

Take Our Poll

Security Tips for 2014

Based on the number of different types of attack over the previous year (2013).  Pentura thought…

Happy New Year!

To all of our readers and supporters wishing you a happy new year.

Introduction

In the last few days everyone is raving about CVE-2013-5065, a new Windows XP/2k3 privilege escalation, well documented by FireEye. Googling around, we came across a Twitter message which contained a link to a Chinese vulnerability analysis…

What is 2G, 3G, 4G?

Introduction

With all the recent fuss over 4G / LTE.  Pentura thought a nice blog post…