Skip to content

Commit 28f94c6

Browse files
thelumberjhackthelumberjhack
committed
Theming and first 2 posts.
1 parent 86bd458 commit 28f94c6

File tree

13 files changed

+176
-4
lines changed

13 files changed

+176
-4
lines changed

‎.gitignore‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
_site/
2-
.sass-cache/
3-
.jekyll-cache/
1+
_site
2+
.sass-cache
43
.jekyll-metadata
4+
*.lock

‎404.html‎

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,24 @@
1+
---
2+
layout: default
3+
---
4+
5+
<style type="text/css" media="screen">
6+
.container {
7+
margin: 10px auto;
8+
max-width: 600px;
9+
text-align: center;
10+
}
11+
h1 {
12+
margin: 30px 0;
13+
font-size: 4em;
14+
line-height: 1;
15+
letter-spacing: -1px;
16+
}
17+
</style>
18+
19+
<div class="container">
20+
<h1>404</h1>
21+
22+
<p><strong>Page not found :(</strong></p>
23+
<p>The requested page could not be found.</p>
24+
</div>

‎Gemfile‎

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,28 @@
1+
source "https://rubygems.org"
2+
3+
# Hello! This is where you manage which Jekyll version is used to run.
4+
# When you want to use a different version, change it below, save the
5+
# file and run `bundle install`. Run Jekyll with `bundle exec`, like so:
6+
#
7+
# bundle exec jekyll serve
8+
#
9+
# This will help ensure the proper Jekyll version is running.
10+
# Happy Jekylling!
11+
gem "jekyll", "~> 3.8.7"
12+
13+
# This is the default theme for new Jekyll sites. You may change this to anything you like.
14+
# gem "minima", "~> 2.0"
15+
gem "jekyll-remote-theme"
16+
17+
# If you want to use GitHub Pages, remove the "gem "jekyll"" above and
18+
# uncomment the line below. To upgrade, run `bundle update github-pages`.
19+
# gem "github-pages", group: :jekyll_plugins
20+
21+
# If you have any plugins, put them here!
22+
group :jekyll_plugins do
23+
gem "jekyll-feed", "~> 0.6"
24+
gem "jekyll-paginate"
25+
gem "jekyll-sitemap"
26+
end
27+
28+

‎README.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,4 +3,4 @@
33
Source code of [thelumberjhack.github.io](https://thelumberjhack.github.io)
44

55

6-
Built with [Jekyll](https://jekyllrb.com) and
6+
Built with [Jekyll](https://jekyllrb.com) and [beautiful-jekyll](https://beautifuljekyll.com/) theme.

‎_config.yml‎

Lines changed: 51 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,51 @@
1+
title: TheLumberJ(h)ack
2+
description: >-
3+
Trials and tribulations of a lumberj(h)ack in the infosec world.
4+
Breaking and sometimes building stuff, Reverse-engineering, malware
5+
analysis, fuzzing all the things...
6+
baseurl: ""
7+
url: "https://thelumberjhack.github.io" # the base hostname & protocol for your site, e.g. http://example.com
8+
author: thelumberjhack
9+
10+
avatar: "/assets/images/site/logo.png"
11+
12+
# TODO: personalize colors
13+
# navbar-col: "#F5F5F5"
14+
# navbar-text-col: "#404040"
15+
# navbar-border-col: "#EAEAEA"
16+
# page-col: "#FFFFFF"
17+
# link-col: "#008AFF"
18+
# hover-col: "#0085A1"
19+
# footer-col: "#F5F5F5"
20+
# footer-text-col: "#777777"
21+
# footer-link-col: "#404040"
22+
23+
navbar-links:
24+
About me: "about"
25+
26+
social-network-links:
27+
twitter: thelumberjhack
28+
github: thelumberjhack
29+
linkedin: yannickformaggio
30+
email: thelumberjhack@[del-me]pm.me
31+
rss: true
32+
33+
link-tags: false # TODO
34+
title-separator: " | "
35+
36+
timezone: "America/Vancouver"
37+
markdown: kramdown
38+
highlighter: rouge
39+
remote_theme: daattali/[email protected]
40+
permalink: /:year-:month-:day-:title/
41+
paginate: 5
42+
plugins:
43+
- jekyll-feed
44+
- jekyll-remote-theme
45+
- jekyll-paginate
46+
- jekyll-sitemap
47+
48+
exclude:
49+
- Gemfile
50+
- Gemfile.lock
51+
- README.md

‎_posts/2015-22-15-VxWorks-from-stone-age-to-interstellar.md‎

Lines changed: 32 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,32 @@
1+
---
2+
layout: post
3+
title: "Attacking VxWorks: From stone age to interstellar"
4+
date: 2015-10-22 10:00:00 -0800
5+
tags:
6+
- talk
7+
- security
8+
- research
9+
- vxworks
10+
- vulnerability
11+
readtime: true
12+
cover-img: {"assets/images/posts/rover.jpg" : "Curiosity Mars Rover"}
13+
---
14+
Presented first at [44Con London][44con-london] in September 2015 then at [Syscan 360][syscan-360] in Beijing in October 2015.
15+
16+
## Introduction
17+
18+
VxWorks is the world’s most widely-used real-time operating system deployed in embedded systems. Its market reach spans across all safety critical fields, including the Mars Curiosity rover, Boeing 787 Dreamliner, network routers to name a few. The safety critical nature of these applications make VxWorks security a major concern.
19+
20+
Our team has conducted a thorough security analysis on VxWorks, including its supported network protocols and OS security mechanism. We will present the tool we developed for VxWorks assessment. The main goal of our tool is to provide effective penetration testing by implementing the WdbRPC protocol in python. To show its effectiveness, we are going to reveal some of the bugs we discovered along the way.
21+
22+
Finally, we will wrap up by demonstrating the vulnerability we found that allows remote code execution on most VxWorks based devices. A quick Internet scan shows that at least 100k devices running VxWorks are connected to the Internet. Considering the popularity of VxWorks in the age of IoT, this issue will have a widespread impact.
23+
24+
## Material
25+
26+
- Slides > [Syscan 360][slides-syscan]
27+
- Fuzzer > [VxFuzz][code]
28+
29+
[44con-london]: https://44con.com/
30+
[syscan-360]: https://www.syscan360.org/en/
31+
[slides-syscan]: https://speakerdeck.com/yformaggio/attacking-vxworks-from-stone-age-to-interstellar
32+
[code]: https://github.com/thelumberjhack/VxFuzz

‎_posts/2017-03-12-All-your-dr0nes-are-belong-to-me.md‎

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
---
2+
layout: post
3+
title: "Reverse engineering & hijacking toy quadcopters – All ur dr0nz r belong 2 me"
4+
date: 2017-03-14 00:00:00
5+
tags:
6+
- talk
7+
- security
8+
- research
9+
- sdr
10+
- drone
11+
- cx10wd
12+
readtime: true
13+
---
14+
15+
Presented at [BSides Vancouver][bsides-vancouver] in March 2017.
16+
17+
## Introduction
18+
19+
From looking for OSINT about the target to reversing SPI dumped bytes and decoding RF signals with the final goal to detect and hijack the targeted drone!
20+
21+
## Material
22+
- Slides > [All ur dr0nz r belong 2 me][slides]
23+
- Code > [all-your-cx10wd-belong-to-me][code]
24+
25+
[bsides-vancouver]: https://www.bsidesvancouver.com/
26+
[slides]: https://speakerdeck.com/yformaggio/reverse-engineering-and-hijacking-toy-quadcopters-all-ur-dr0nz-r-belong-2-me
27+
[code]: https://github.com/thelumberjhack/all-your-cx10wd-belong-to-me

‎about.md‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
---
2+
layout: page
3+
title: About
4+
permalink: /about/
5+
---
6+
7+
To be done...

‎assets/images/posts/rover.jpg‎

43 KB
Loading

‎assets/images/site/hero.jpg‎

1.22 MB
Loading

0 commit comments

Comments
 (0)