Resources

Research, experimentation, and continuous improvement are fundamental to how we operate at elttam. Our consultants spend a significant amount of time exploring new technologies, building tooling, analysing vulnerabilities, and turning interesting problems encountered in the field into deeper technical investigations.
‍

This section brings together that work - from detailed research posts and vulnerability disclosures to tools, publications, and updates from the team. By sharing what we learn, we aim to contribute back to the security community while pushing our own knowledge and capabilities forward.

Mykel Pritchard

June 15, 2017

Intro to SDR and RF Signal Analysis

We take a brief look into Radio Frequency (RF) theory, Software Defined Radio (SDR), and visual analysis of various RF signal characteristics.

SDR

reversing

hugsy

January 24, 2017

Playing with canaries

Analysis of compiler stack canaries and their implementation across various architectures.

mitigations

reversing

exploitation

Matt Jones

and

Daniel Hodson

August 11, 2016

EFF secure messaging scorecard review

We decided to audit libotr to gauge its general maturity. This post shares some of our work from the audit.

eff

exploitation

Daniel Hodson

June 2, 2016

Vuln research on the WAG54G home router

Journey of hunting for bugs in the WAG54G routers http daemon to find a way to remotely flash C&C firmware (pre-auth).

hardware hacking

reversing

exploitation

Matt Jones

and

Daniel Hodson

February 3, 2016

A review of the EFF secure messaging scorecard...

First part in a series of reviews against IM clients promoted by the EFF secure messaging scorecard.

eff

exploitation

Daniel Hodson

December 16, 2015

Gaining console access to the WAG54G home router

Illustrated guide on identifying and interfacing with the serial pinout exposed on the Linksys WAG54G home router, useful for debugging and exploit dev.

hardware hacking

reversing

exploitation

Matt Jones

September 8, 2015

Why I recommend Chrome to family...

An analysis of the browser threat landscape and reasoning about browser security for the family user.

general

Resources

Intro to SDR and RF Signal Analysis

Playing with canaries

EFF secure messaging scorecard review

Vuln research on the WAG54G home router

A review of the EFF secure messaging scorecard...

Gaining console access to the WAG54G home router

Why I recommend Chrome to family...

In the News

What all the fuss is about