recursivetech

Joined 5 years ago

Karma

6

Submissions

3

Member since

May 12

¯\_(ツ)_/¯

View on Hacker News

Recent submissions

Comment · 3 years ago

A few years back, I recall reading about some automotive manufacturers who had just copied an example "airbag arming authorization" code/value that appeared in a shared spec document (IIRC) for their vehicles. There was a Metasploit module created (for the Hardware Bridge) that would send CAN bus messages to just check/verify if a particular vehicle uses this insecure arming code. For vehicles using this known code, an attacker with CAN bus access could deploy airbags on an unsuspecting target during vehicle operation. https://www.rapid7.com/blog/post/2017/12/22/metasploit-wrapu...

Comment · 5 years ago

Nice! Will definitely check this out.

Comment · 5 years ago

Sounds like a nice value-add to our IR workflow. Does it work with PagerDuty?