FeliCA
Basics of FeliCA vs other NFC standards. (Japanese standard)
入退室管理システム、ICカード、顔認証、セキュリティゲートといった、より安心・安全な社会を目指すセキュリティに関するセキュリティ情報メディアサイトです。

Product Placement

ellievsbear
2025 on Tumblr: Trends That Defined the Year
taylor price

pixel skylines

JBB: An Artblog!
NASA

Love Begins

oozey mess
Xuebing Du
cherry valley forever
todays bird
we're not kids anymore.

祝日 / Permanent Vacation

Stranger Things

⁂

shark vs the universe
🪼
$LAYYYTER

seen from United Kingdom
seen from United States

seen from United States
seen from United States

seen from United States

seen from France
seen from Japan

seen from United States

seen from Austria

seen from Sweden
seen from Brazil
seen from United States

seen from Germany
seen from Singapore

seen from Australia
seen from United States
seen from United States

seen from Italy
seen from Italy
seen from United States
@shinobiops
FeliCA
Basics of FeliCA vs other NFC standards. (Japanese standard)
入退室管理システム、ICカード、顔認証、セキュリティゲートといった、より安心・安全な社会を目指すセキュリティに関するセキュリティ情報メディアサイトです。

Anya is live and ready to show you everything. Watch her strip, dance, and perform exclusive shows just for you. Interact in real-time and make your fantasies come true.
Free to watch • No registration required • HD streaming
Resurrecting this blog :) Happy 2026
Dumping hashes without triggering EDR
After getting annoyed with nanodump being detected I did some searching for methods that can dump LSASS without triggering sensors. Recently I had read about a method using Forensics software doing a full ram dump.
A link to that article is here - https://pentestmag.com/bypass-lsass-dump-protection-with-ram-dump/ (commands as listed did not work, so here is a fresh post)
I decided to give this a shot however against Crowdstrike Falcon, first downloading Magnet Ram Capture - https://support.magnetforensics.com/s/article/Acquire-Memory-with-MAGNET-RAM-Capture
(Requires a biz email)
Armed with Magnet Ram Capture I was able to dump all data from Ram without triggering any Crowdstrike Falcon alerts.
Avoid setting a segment size, life was easier with all ram dumped to a single file.
Now use volatility! The following volatility3 command worked for me -
python3 vol.py dump.raw windows.hashdump
GO Race Condition hunting
I recently discovered the power and beauty of the in-built GOLANG race detector -
It can be used in the following ways
$ go test -race mypkg // to test the package
$ go run -race mysrc.go // to run the source file
$ go build -race mycmd // to build the command
$ go install -race mypkg // to install the package
It is recommended you run your project with -race and test as many code paths as possible as you will find more race conditions under load. I found 5 bugs with this just this week!
P.S you will need GCC! :)
Conditional Access Policies
Ever pop MSOL creds and but still cant access external resources due to access policies or MFA?
Try MS GraphAPI ;) (may lack the same controls as other resources.)

Anya is live and ready to show you everything. Watch her strip, dance, and perform exclusive shows just for you. Interact in real-time and make your fantasies come true.
Free to watch • No registration required • HD streaming
The FlipperZero continues to be a great hacking multi tool, capabilities tested so far
LF Badge Cloning
Hotel Key Cloning
Wireless Light Control
Tesla Door charger ports
D&B Arcade cards
NFC Cloning/Bank Cards
I have found the following Github to be a great source for useful files
🐬 A collection of awesome resources for the Flipper Zero device. - GitHub - djsime1/awesome-flipperzero: 🐬 A collection of awesome resources
Keeping covert access equipment hidden
There are times when I would like to carry things like lockpicks, handcuff keys, and RFID bypass tools on me without drawing attention. I have found matchboxes work great for this purpose.
Additional Sneaky places
hat brim
under belt
in phone case
hidden in shoe
Think about places you are commonly searched and what is felt for, you will quickly find strategies that work best for you.
Stay tuned for more red team tips...