Finally got a chance to finish the reverse of MacDonald's table beacon. I would need more RF analysing devices and some Bluetooth sniffing cards to try some more on it one day. Here is the full writeup :.

Got some patches from BirdOvPrey 😈

What do you want to know?.

@Xiaomi Blog post available here .

And just like that you can exfil WiFi network.wifi_country, network.ssid and network.password in plain sight from the @Xiaomi light bulbs .Quick and dirty way to access target network 😈

And like that, I got a new trophy 🏆 how long will the rest hold ? only one way to find out (hopefully long enough to run backups 😈)

I'll do correct solder masking someday I swear 🤭

Not the best solder but it's doing the job

Time to secure the tapping wire

Tapping points ✅

Clearing test points ✅

Something is cooking 🔬.(25G needle for scale 💉). Time to practice trace tapping on some random pcb before actual target

@0xN0x_ Slide deck is available on my website .

We are so back ‼️.This time for a joint presentation with @0xN0x_ to make everyone paranoid with TEMPEST 😈. Thank to Bière Sécu Rennes for hosting this event and our shenanigans

some MPX EN5038B under the microscope

PoV of the SOC on my desk about to get unsoldered

The yeen wasn't able to see small components so she got an upgrade 🤭

Ah shit, here we go again

Let's try without the unsolder and solder part this time on another form factor

And now it boot !

DELLs BIOS bypass ✅.Chip extraction➡️Firmware dump➡️modification ➡️reflash➡️Chip resolder .Maybe a WU soon :Д