Accessing Hidden Serial Consoles - BusPirate Demo 2/2 - Hardware Hacking Series #5

[@n.w.aicecube5713]

I wonder how some people dare to press dislike button. This kind of stuff require a lot of effort on researching and practice. And the dude here is offering precious hand to practice stuff. People pay for crappy basics, this is high quality pentesting. Think twice before pressing that dislike button

[@clickbait6046]

Great Series! Keep up the good work! Also the SDR Series was great!

[@CrazyDanishHacker]

Hopefully more videos coming soon when I get some free time :-) I got some great stuff I've planned

[@fiver-hoo]

cool series. Making the console window a bit bigger would be nice.

[@CrazyDanishHacker]

Yeah going forward, I generally try to make the console window text larger in some videos at the moment. The more videos I make, the better I try to make them :-)

[@neilfpv]

Is BusPirate used for getting access to blackboxes?

[@andrewnairn3779]

Was struggling with the bus pirate....but not anymore, thank you

[@CrazyDanishHacker]

Thanks for the good feedback, I know it's not a very intuitive device as I had to look up a few docs and read through them, especially for the UART console.

[@dfhher6570]

hi danish, time without write you, it seems spectre and javascript are a big issue then what i told you is happening in www.elchat.com maybe is true, that chat uses javascript do you think a website as www.elchat.com can exploit the spectre cpu vulnerability?

[@CrazyDanishHacker]

I doubt it, spectre and meltdown requires a lot of skill and reliable code execution at the moment as far as I know. If you're worried about this attack, then make sure Chrome has auto-updated and that "strict site isolation" has been enabled in Chrome: chrome://flags/#enable-site-per-process (Click enable and restart)

[@dfhher6570]

thanks danish

[@RALIPALBRACH]

How to change android phone time with meterpreter session.. no rooted phone ..

[@CrazyDanishHacker]

To be honest I don't really know, I don't do a lot of mobile/smartphone exploitation, but if you want to change the phone time, just go into the settings? However, through a meterpreter session you will probably need to run a root exploit (I don't have any of those btw).

[@RALIPALBRACH]

thanks ..you any person who do this ..

[@CrazyDanishHacker]

The people I know would probably keep these 0days private or sell them for a lot of money.

[@karimdakhlallah4466]

Dude where are you ? what happened ? we miss your creative fancy way of doing things....the the way, do you have an email where i can mail you ?

[@CrazyDanishHacker]

I've been busy with other projects to make some money and pay the bills. I'm currently working on some penetration tests, custom open source tools that will be released soon, and also some new videos for another channel. You can message me on Facebook, Twitter or KZbin if you want to.

[@dfhher6570]

maybe working for a nice agency, this guy is a genius.

[@CrazyDanishHacker]

I'm currently working for a few privately owned companies, as a full-time penetration tester. It pays a lot better. I'm also going to the Black Hat conference, if you find me there (it shouldn't be too hard, but I won't be wearing sunglasses), drop by and say hi :-)

[@oussamalarbi6637]

have u stopped making hacking videos

[@CrazyDanishHacker]

I might make some more videos in the future after I'm done with another project, plus I also have a fair amount of work at the moment.

[@oussamalarbi6637]

Crazy Danish Hacker ok and thank u so much, why don't u play ctf and other things i really do miss u r videos

[@CrazyDanishHacker]

Thanks Oussama :-) I'm not really much of a CTF guy, I mostly do research (to present at conferences for example) or professional pentesting instead. I'll take your advice and maybe look into doing some of the VulnHub VMs with microphone only.

[@oussamalarbi6637]

Crazy Danish Hacker great why not that would be soo cool i do some research on distributed sys and iot and i am thinking about getting in security

[@CrazyDanishHacker]

Doing it for a living is actually not a bad job, even though as a job you also have to write a lot more extensive reports.

[@Veso266]

how is BusPirate difrent then Serial Console which you have showed here: kzbin.info/www/bejne/oandn4yriJmnobs does it support JTAG?

[@CrazyDanishHacker]

Good questions as always Veso266 :-) The USB-to-TTL device in part 1 is a lot easier to use (plug-n-play if you have PuTTy), but it can only do UART, which I've shown in my videos so far. The BusPirate can do many different modes, e.g. 1-wire, I2C, JTAG, etc. but it needs to be configured first every time you use it. So when I want to play with my routers for example, then I actually use the USB-to-TTL device because I only need to plug the wires in, connect via USB, open COM4 in PuTTy and go. For the BusPirate I need to look up the diagram because it has a lot more wires, connect them, then connect via USB, open COM4 in PuTTy, then reconfigure it into UART mode, and finally Macro mode (Transparent Bridge I think it is), and then I can use it :-) I haven't tried these yet, but I have read quite a bit about JTAG a month or two ago, to see whether I needed a JTAGulator or equivalent. If you're only going to do UART, get a USB-to-TTL device. If you're going to do other modes, get a BusPirate. No need to buy both :-)

[@pentestingarabiclanguage6717]

need to talk with u if u are online respond please and thx

[@CrazyDanishHacker]

Just ask a question on a video Ebdelli. As long as it's related to ethical hacking I will do my best to answer your question.

[@pentestingarabiclanguage6717]

im asking if u give course on CEH ?

[@CrazyDanishHacker]

No :-) Save your money and do Pentesting With Kali (PWK) by Offensive Security. Then do their OSCP (Offensive Security Certified Professional) exam. If you pass you have a much greater chance to get a job.

[@whereveryouare6334]

Can u create video tutorial playlist for HackRF One hacking ?

[@CrazyDanishHacker]

All of my videos should be doable with a HackRF One :-) (If you mean a playlist of my videos that is.)

[@jorgekck.c.841]

Fazer isso com router bom é facil. Faca isso com um router morto, dead.!!!!!!!