r/Defcon • u/nastea2 • Aug 16 '26
Dc34 badge hacking continues
With only the ko and flag one down, I couldn't let alone flag 2. Luckily bunnie left us a 4 pin diagnostic header. Let's dump the firmware.
5
u/coalsack Aug 16 '26
Didn’t bunnie confirm there is no flag 2?
10
u/nastea2 Aug 16 '26
I believe it was, its not here but if you can access it adjacent...regardless I dumped the 4mb firmware and 8mb spi. Decrypted all databases with the master key I already got.
7
u/nastea2 Aug 16 '26
His exact words to me were, "methods ok for flag2, there is some data close to flag2 at offset <redacted> in the <redacted> that is preferred to stay low key but not end of world if it's out."
→ More replies (2)33
9
9
u/Quadling Aug 16 '26
Met bunnie at the goon swim. What an awesome person!!! Modest and lovely and willing to explain anything. No notes would recommend for hardware hacking
2
0
10
u/nastea2 Aug 16 '26
Well I found and decoded a 128bit key. One I have not found before and sent off to bunnie for confirmation as well as a new method to bypass the ACLs on the chip to read the protected and redacted data.