River Loop Security @riverloopsec

riverloopsecurity.com Joined April 2013

Tweets

101
Followers

352
Following

5
Likes

11

River Loop Security @riverloopsec

3 years ago

Our most recent blog peeks behind the scenes of our hardware security research - how custom PCBs & small-scale circuit assembly allows us to explore new attack surfaces. We hope that sharing this enables other people to learn from our tips-and-tricks: riverloopsecurity.com/blog/2022/08/s…

0 2 2 0 0

Download Image

River Loop Security @riverloopsec

4 years ago

Glitching has become a critical part of our hardware hacking toolkit. Today we release a new open source tool, FlashBASH, to help automate electrical glitching tests to break into serial consoles! #hardwaresecurity #hardwarehacking riverloopsecurity.com/blog/2021/09/i…

0 1 6 0 0

River Loop Security @riverloopsec

4 years ago

Team member @krx__ shares his journey of deep technical analysis and recovery of Huawei EchoLife flash memory analysis. riverloopsecurity.com/blog/2021/07/n…

0 1 3 0 0

River Loop Security @riverloopsec

4 years ago

Our newest team member Kevin shares a useful how-to on adding chip support to Flashrom – a commonly used open source tool for extracting contents from flash memory chips. #embedded #hardwarehacking riverloopsecurity.com/blog/2021/07/f…

0 3 4 0 0

River Loop Security @riverloopsec

4 years ago

Our final installment of the HW 101 JTAG blog post series is out - we cover how to communicate with a target device via JTAG once the pinout has been identified. OpenOCD & GDB step-by-step on a real system. Take a look! riverloopsecurity.com/blog/2021/07/h…

0 1 4 0 0

River Loop Security @riverloopsec

4 years ago

In the next installment of our hardware hacking 101 series, we introduce JTAG – while it originates from the world of manufacturing and electronics testing, it has major implications for hardware security today. riverloopsecurity.com/blog/2021/05/h…

0 2 5 0 1

River Loop Security @riverloopsec

5 years ago

Take a look at #ninjadiff, our newly released an open source binary diffing plugin for BinaryNinja! You can read about how it works and get it via riverloopsecurity.com/blog/2021/02/b… Submit issues, pull requests, and give us feedback!!! Great work led by @TheWizard0f0dd CC @vector35

1 12 17 0 7

Download Image

River Loop Security @riverloopsec

5 years ago

We often get questions about when a pentest is most helpful & valuable to an organization. We hope this blog is helpful in sharing some of our observations over the years on when & how one can best help an organization. riverloopsecurity.com/blog/2021/01/p…

0 0 0 0 0

River Loop Security @riverloopsec

5 years ago

We recently shared some of our research on #hardware implants for the TPM bus - specifically FPGA decoding/modification on LPC bus TPMs. Come read a brief overview on what our team shared at #ieee PAINE. riverloopsecurity.com/blog/2021/01/i…

1 3 7 0 0

Download Image

River Loop Security @riverloopsec

5 years ago

If you're involved in connected devices, IoT, or related fields in the US, knowing what's coming with the new IoT-related law is a must. You can study up quickly before the holiday at riverloopsecurity.com/blog/2020/11/i…

0 0 3 0 0

River Loop Security @riverloopsec

5 years ago

Check out CVE-2020-13995, found by our team member @cyberingcc! Great work applying some new tooling and lessons from research we developed to find a number of issues within an implementation of the US NITF (overhead imagery format) specification. See riverloopsecurity.com/blog/2020/09/n…

0 1 6 0 1

River Loop Security @riverloopsec

5 years ago

As part of our work using binary instrumentation and static analysis to understand parsers’ de facto file format specifications, @cyberingcc found parts of the spec which are likely to lead to implementation errors and vulnerabilities. riverloopsecurity.com/blog/2020/08/n…

0 2 2 0 0

River Loop Security @riverloopsec

5 years ago

A well segmented (security) architecture is difficult when designed from the start - and even tougher to do after-the-fact along with an acquisition transaction. Take a look at reuters.com/article/us-usa… - only the tip of the iceberg of work to do. @Reuters @Microsoft @tiktok_us

0 0 2 0 0

River Loop Security @riverloopsec

5 years ago

Check out the great work by our friends at @grimmcyber (Adam Nichols, et al) which expanded on the analysis we did of the DJI Mimo app to look at some of the same issues (and others) in the DJI GO 4 app. riverloopsecurity.com/blog/2020/05/d… blog.grimm-co.com/2020/07/dji-pr…

0 7 10 0 0

River Loop Security @riverloopsec

5 years ago

We are proud to support Howard County General Hospital's Heros in Healthcare campaign during this time! youtu.be/-hSRyoGnuXk?t=… Our team who tests medical devices for security issues has deep experience in health: designing medical devices, as clinical providers, & scaling EHRs.

0 0 0 0 0

River Loop Security @riverloopsec

5 years ago

Check out a post we co-wrote with some teammates about tooling used to find modifications hidden in parsers as part of @sergeybratus's DARPA #SafeDocs project! @rmspeers @pli888 @Calaquendi44 @mlocasto riverloopsecurity.com/blog/2020/06/s…

0 5 6 0 0

River Loop Security @riverloopsec

5 years ago

A nice proof of concept from @cyberingcc -- a use of FUSE for helping harness fuzzing - this should be a framework that others can build on to add different permutation generators/etc. Proud to have a team doing innovative work, and sharing it with the community!