Month: June 2025
-
Reversing One of the Most Common Chinese Commercial Rolling Code
In Latin America, some automotive dealerships source RKES systems from the Chinese market and subsequently homologate them for official use in their vehicles. This…
-
Review of the libwebp vulnerability (POST not finished yet)
Resources: Video: https://www.youtube.com/watch?v=PJLWlmp8CDM https://dayzerosec.com/vulns/2024/01/08/exploiting-the-libwebp-vulnerability-part-1-playing-with-huffman-code.html Background: What Is libwebp and Why It Matters The vulnerability in question (tracked as CVE-2023-4863 / CVE-2023-5129) is a heap…
-
How to install Universal Radio Hacker (URH) in Linux/Kali/Ubuntu/Debian
Option A: Install URH like a boss Install prerequisites file:///media/sda1/index.html Depending the SDR device you are going to use, you need to install the…
-
How to install picoscope in Kali Linux
Import public key Configure your system repository Update package manager cache Install PicoScope Run picoscope When you run picoscope you get the following error…
-
Calix ONT Hacked: Five 0 days Five CVEs
Iām Danilo Erazo, an Independent Automotive Security Researcher. In February 2025, I had the opportunity to conduct hardware hacking and software reverse engineering analysis…
-
Cryptoparty 2024 Quito
Cryptoparty is a decentralized movement with events held worldwide. The goal of the event is to share knowledge and information on how to take…
-
Ekoparty 2024
Danilo Erazo participated as a speaker in the main track of Ekoparty 2024, the largest and most important hacking event in Latin America. Danilo…
-
My H2HC Conference Summary
I am Danilo Erazo (Independent Car/Hardware Security Research, Pentester, Programmer & Hacking lover) I was invited to the H2HC conference to be at the…
-
Data Exfiltration Bypassing USB Storage Restrictions with Serial Communication channel with Flipper Zero BadUsb
Author: Danilo Erazo I was approached to conduct on-site wifi hacking and penetration testing, including executing local data exfiltration on secured computers that block…
-
Unlocking thousands of Cars by exploiting Learning Codes from Car Key Fobs by Danilo Erazo
I am Danilo Erazo, an independent hardware security researcher. I discovered and exploited several vulnerabilities in cars with key fobs that use learning codes…