D_K @D_K_Dev

IT-Security Student, @allesctf Member, Co-Founder and Security Researcher @neodyme Joined July 2012

Tweets

48
Followers

223
Following

158
Likes

112

CSCG @C_S_C_G

2 months ago

CSCG/OpenECSC 2026 ist erfolgreich abgeschlossen! 🎉 Die besten Player aus den Kategorien Junior und Senior werden nun zum Auswahl-Event eingeladen, bei dem das deutsche Team für die ECSC in Bochum bestimmt wird.

0 1 5 153 0

View Details

CSCG @C_S_C_G

4 months ago

Germany will host the European Cybersecurity Challenge (ECSC) 2026 in Bochum. NFITS e.V. will be the main organizer. ~500 participants are expected in October, with finalists competing in up to 45 national teams. 👉ecsc2026.de/news/ecsc-2026…

0 8 22 658 2

View Details

TrendAI Zero Day Initiative @thezdi

5 months ago

Confirmed! Neodyme AG (@Neodyme) used a stack based buffer overflow to get a root shell on the Alpine iLX-F511, earning $20,000 USD and 2 Master of Pwn points. #Pwn2Own #P2OAuto

0 4 23 3K 3

View Details

Neodyme @Neodyme

5 months ago

Drones are hot - their security is not. Here is how removed the NAND, dumped firmware, and reverse-engineered ECC on a consumer drone. Stay tuned for part 2! neodyme.io/de/blog/drone_…

2 14 20 1K 6

View Details

Neodyme @Neodyme

8 months ago

Another amazing #Pwn2Own in the books! 💪 Our team pulled off some great hacks: 🖨️ HP Printer — $20K / 2 MoP 🏠 Home Assistant — $15K / 3 MoP 🔌 Smart Plug — $20K / 2 MoP 📸 Canon — $10K / 2 MoP Total: $65K / 9 MoP So proud of what we achieved together! 🧠⚡

3 3 24 2K 2

View Details

TrendAI Zero Day Initiative @thezdi

8 months ago

Success! We had a little configuration confusion, but Team Neodyme (@Neodyme) hopped for joy as their exploit of the Amazon Smart Plug was successful. Their attack went over Bluetooth & WiFI, so they used the RF enclosure. They head off to the disclosure room with details. #Pwn2Own

0 4 13 5K 1

View Details

Deutsche Hacking Meisterschaft @DHM_ctf

11 months ago

Would you like to participate in the German Hacking Championship next year? 💻🎉Then, your next chance to qualify is this weekend! Have fun at #enowars, an attack-defense CTF hosted by @ENOFLAG.

0 1 3 233 0

View Details

CSCG @C_S_C_G

a year ago

The Cyber Security Challenge Germany 2025 has started! 🎉 The competition runs from March 1 - 18:00 CET to May 1 - 18:00 CEST. We're excited to announce that we are inviting the top 6 DACH players in the EARTH category to the @DHM_ctf! Participate now at: play.cscg.live

0 5 13 5K 1

View Details

Neodyme @Neodyme

a year ago

Following our #38c3 talk about exploiting security software for privilege escalation, we're excited to kick off a new blog series! 🎊 Check out our first blog post on our journey to 💥 exploit five reputable security products to gain privileges via COM hijacking: neodyme.io/blog/com_hijac…

1 22 71 16K 28

View Details

Neodyme @Neodyme

a year ago

ND people are @ #38c3 in Hamburg, Germany. Be sure to check out our two talks about LPEs in AV/EDR Products (Saturday, 4 PM YELL) and a not yet mitigated Bitlocker Flaw! (Saturday, 7:15 PM HUFF)

1 4 9 1K 1

View Details

D_K @D_K_Dev

2 years ago

@_h0p5 I used the xgecu t56. I first desoldered the chip and later connected fly wires to read and write in circuit. The only downside to the dumper is the software only runs on windows. But people told me it runs via wine too, but haven't tried it.

0 0 4 159 0

View Details

D_K @D_K_Dev

2 years ago

After a great #Pwn2Own with @Neodyme , I would like to share some insights I gained when working with the AeoTec Smart Home Hub. We did not manage to find any bugs in time but dumping the firmware was a great lesson. So, let’s tell you the story of how I approached this target.

1 15 103 17K 43

View Details

Neodyme @Neodyme

2 years ago

Since we had used a different setup without any administrator account, our official attempt during #Pwn2Own failed. However, @thezdi provided us with a second chance to present our Lexmark exploit and it worked 🖨️🎉

2 2 26 2K 2

View Details

D_K @D_K_Dev

2 years ago

@xnyhps @bl4sty So I wanted to make a different capture and found github.com/AristoChen/usb… . Setting this up via a Pi4 did the trick and it started to boot from the flash drive. Still don't know why. The flash alone did not work.

0 0 2 123 0

View Details

D_K @D_K_Dev

2 years ago

@xnyhps @bl4sty I also struggled to get it working. I recorded pcaps of the USB connection via a GreatFET to debug what happens. But they looked fine, though they stopped after the first USB packet.

1 0 1 128 0

View Details

D_K @D_K_Dev

2 years ago

Now I could either reflash the emmc chip or use the nice USB-Boot mode of the custom U-Boot ;), though that required pulling Boot0 Pin high and a weird USB Flash drive config.

3 0 8 1K 1

View Details

D_K @D_K_Dev

2 years ago

After some reversing and looking arround, I noticed the U-Boot version was 2017.11 . A quick search revealed CVE-2020-10648. A verified boot bypass for U-Boot. What was left was crafting a new fit image and using a custom initrd with the init command replaced, by a shell.

1 0 1 1K 0

View Details

TrendAI Zero Day Initiative @thezdi

2 years ago

Our final SOHO Smashup of Day 2 ends with a partial collision. Neodyme (@Neodyme) used 4 bugs, including a stack-based buffer overflow, in their successful demonstration, but 1 bug had previously been used in the contest. They earn $21,875 and 8.75 Master of Pwn points. #Pwn2Own