round 2: rooting & analysing firmware of the TP-Link TL-WR841N
An Update on OpenTitan
⠠⠵ avuko (@avuko@infosec.exchange)
@elena@aseachange.com @aral@mastodon.ar.al I couldn't resist, so I've wasted my precious time looking at "W Identity" today. Things are not right. It is basically a repurposed https://github.com/PeterWaher/IoTGateway Just look here: https://root.widentity.eu/Settings/Master.md It has a socks4(?) open on port 1080, some xmpp stuff on 5222 and 5269, another (seemingly broken) version of the website on 8088. The following pages are accessible without auth: (found by a simple "`egrep -LR 'Privilege:|Login:' * |grep md | grep Root`" through the source) ``` /Settings/PersonalData/LocalDatabase.md /Settings/PersonalData/LocalSensorsAndDevices.md /Settings/PersonalData/EventLogs.md /Settings/PersonalData/NetworkIdentity.md /Settings/PersonalData/WebPages.md /Settings/PersonalData/Backups.md /Settings/Master.md /Copyright.md /Starting.md [http response 307] /Login.md /Entities.md /Templates/Repeat.md /AdminDropdownComponent.md /Script.md /AdminDropdown.md /AlertPopup.md /Master.md /PromptPopup.md /ConfirmPopup.md /Markdown.md /Emojis.md /Smileys.md /Index.md /MarkdownEditor.md /ScriptColors.md /Master.md ``` Others pages also exist (no 404), but are only available after login. Which brings me to the biggest problem of all. This is an **ADMIN** interface. Nobody should **ever** put an admin interface to an identity management platform on the internet. #WSocial #Widentity
[OpenWrt Wiki] Google Wifi
Google Wifi is a 2×2 802.11ac AP with a quad-core Qualcomm IPQ4019 SoC, 512 MB RAM, and 4 GB eMMC storage. Its stock firmware is based on ChromeOS, including a bootloader based on Coreboot and Depthcharge, and can be convinced to run non-Google-signed software (such as OpenWrt) by entering Developer Mode. The device is also known by its internal name “Google Wifi Gale”
Firmware Boot and Recovery
Everything I own, owned
Turning Claude loose on the firmware of five USB and WiFi peripherals, and finding a command shell in a microphone, a defeatable webcam activity LED, and unauthenticated memory writes over the network.
10G USB Network Adapter | USB3.2+ Realtek RTL8159 10G RJ45
Here is the latest update on our shipping progress:Milestones Completed:The first batch of 110 units arrived on May 16.Warehousing was completed on May 18, and all units from this batch were shipped out between May 18–19.Next Shipment Schedule:The next batch is expected to arrive around May 25.We plan to ship all remaining current orders between May 27–28.Going Forward:After this batch, we will return to our regular shipping rhythm.Thank you for your continued support and patience. If you have any questions, please feel free to email us （contact@wisdpi.com）anytime.WisdPi USB ethernet adapter discord channel: https://discord.gg/QVwrptgyV1,000 units currently in production are now available for pre-order and are expected to ship on May 20.The WP-UT9 is a professional-grade USB Ethernet adapter engineered to deliver up to 10GbE (10 Gigabit Ethernet) speeds. Housed in a premium CNC-machined enclosure, it’s the ultimate tool for power users, NAS enthusiasts, and creative professionals requiring massive bandwidth on the go.Key FeaturesTrue 10GbE Performance: Built on the Realtek RTL8159 chipset, supporting line-rate 10Gbps networking.USB 3.2 Gen 2x2 Interface: Designed with a 20Gbps dual-lane interface to ensure enough overhead for full 10GbE throughput.Universal Compatibility: Backward compatible with 5G, 2.5G, 1G, and 100M/10M standards.Bus-Powered & Driverless: Plug-and-play on most modern OS (macOS, Windows, Linux).Industrial Design: Robust aluminum alloy shell for superior heat dissipation and durability.Important Performance Note (Read Before Purchase)To achieve the maximum 9.4Gbps+ (10GbE) throughput, the WP-UT9 requires a USB 3.2 Gen 2x2 (20Gbps) host port.Windows/Linux PC: Most modern motherboards with USB 3.2 Gen 2x2 ports will achieve full 10GbE speed.macOS / Thunderbolt Ports: Apple Silicon Macs and Thunderbolt 3/4 ports currently do not support the "Gen 2x2" protocol. On these devices, the adapter will operate in Gen 2x1 (10Gbps) mode, resulting in a real-world maximum throughput of approximately 5.5 - 6.0Gbps due to USB protocol overhead.Driver NoteMost systems support plug-and-play. Some systems or specific OS versions/environments may require driver installation.For the latest drivers and support information, please visit Realtek’s official page:https://www.realtek.com/Download/List?cate_id=585Cable Recommendation10GbE: CAT6A or above5G / 2.5G: CAT61GbE or below: CAT5e or aboveLED IndicatorsAmber (Link): Solid on = Link establishedGreen (Activity): Blinking = Data activity (traffic)Technical SpecificationsFeatureSpecificationChipsetRealtek RTL8159Host InterfaceUSB 3.2 Gen 2x2 Type-C (20Gbps)Network Port10G RJ45 (Supports Auto-Negotiation)LED IndicatorsAmber (Solid): Link established; Green (Blinking): Data ActivityDimensions59 x 29 x 13 mm (2.32 x 1.14 x 0.51 in)WeightAdapter: 37.7g | Total Package: 58.8gCable Length132 mm (High-quality USB-C to C cable included)�
AlexsJones/llmfit
Hundreds of models & providers. One command to find what runs on your hardware.
Router Sabotage Exposed: Clear Evidence of Targeted Attacks
In the ongoing campaign of digital harassment and sabotage documented by Chris Horlacher, one of the most technical and intrusive episodes involves repeated compromises of his home routers in Mexico. These incidents directly affected Chris Horlacher’s ability to work, communicate securely, and acces
Hacking Millions of Modems (and Investigating Who Hacked My Modem)
Two years ago, something very strange happened to me while working from my home network. I was exploiting a blind XXE vulnerability that required an external HTTP server to smuggle out files, so I spun up an AWS box and ran a simple Python webserver to receive the traffic from the vulnerable server.
Wi-Fi Aware | Apple Developer Documentation
Securely pair and connect to external devices over peer-to-peer Wi-Fi.
The Deceptive Complexity of P2P Connections and the Solution We Found
Discover how ARK Builders navigated a maze of p2p network technologies, comparing WebRTC, libp2p, and Iroh to find the perfect fit.
