Skip to main content

Posts

Showing posts from April, 2019

From Concept to Bench - Designing a Flipper-compatible nRF24L01 RF Module for Security Research

    Six months of design iterations, sourcing headaches, and a broken oscilloscope later — I am pleased to share a hardware module I designed to extend the Flipper ecosystem for RF security research. This write-up covers the motivation, engineering challenges, capabilities, and responsible-disclosure principles behind the project — and a frank look at a vulnerability that is very much alive in the Maldives today.   Left: 3D render of final PCB     ·     Right: Altium Designer PCB layout view Why I Built It  The trigger was reading the original MouseJack disclosure by Bastille Networks. It made me realize that a class of peripherals most people assume to be harmless — the cheap wireless mouse on your desk — can be weaponized from a car park. I wanted a research platform small enough to carry in a jacket pocket, native to the Flipper Zero ecosystem, and capable of passive scanning, protocol analysis, and controlled lab tests. What I...
Post a Comment
Read more

Python scrip to get public_url from ngrok using API.

First of all what is ngrok?  ngrok exposes local servers behind NATs and firewalls to the public internet over secure tunnels. This can be used by developers who want to run webhooks with https if you dont have a local ssl certificate. For example telegram, Facebook etc use webhook but they only allow ssl. If you want to know more about the ngrok , <---- please click this link for more information. The script after setup the ngrok in the local machine you can run the ngrok command to start the tunnel. in my case i run the ngrok as a service which i have explained in my previous post . After the service is running you can run the python script or your preferred to fetch the public_url from ngrok which can be use to automate the process. For example Telegram Bot with webhook enable only communicates with https urls so from this method you can get the randomly generated https url to use in such scenarios. In case if you have a doubt about usage of ngrok and automation ...
Post a Comment
Read more

TIPS#01: How to run a script as a Linux service?

If you want to run your own script for example a shell script, python etc as a Linux service, please follow this guide. I have tested and already using this methods and this works perfectly. In this example i am using an Ubuntu Linux and a shell script (which will run ngrok as service) if you want to know more about ngrok check out there website. STEP#1: Prepare you script file that you want to run as a service. once you are done with editing save and exit STEP#2: Prepare the service Go to "/etc/systemd/system" and create a file with your naming preferences but should end with a ".service" for example my file name was ngrok.service This how the file should look like. ExecStart is where you define the script that you want to run. Once you done editing save the file and follow the commands as follows. To enable the service  systemctl enable ngrok.service Reload the deamon systemctl daemon-reload Test the service if you run ...
Post a Comment
Read more