Robin Bradshaw en4rab

hi, i'm daniel. i'm a 15-year-old with some programming experience and i do a little bug hunting in my free time. here's the insane story of how I found a single bug that affected over half of all Fortune 500 companies:

say hello to zendesk

If you've spent some time online, you’ve probably come across Zendesk.

Zendesk is a customer service tool used by some of the world’s top companies. It’s easy to set up: you link it to your company’s support email (like [email protected]), and Zendesk starts managing incoming emails and creating tickets. You can handle these tickets yourself or have a support team do it for you. Zendesk is a billion-dollar company, trusted by big names like Cloudflare.

Personally, I’ve always found it surprising that these massive companies, worth billions, rely on third-party tools like Zendesk instead of building their own in-house ticketing systems.

your weakest link

Recovering the BIOS Password from an Asus VivoBook (AMI UEFI)

This tutorial provides a step-by-step guide to recover the BIOS password from an Asus VivoBook using a memory dump.

Prerequisites

Memory Dump: Obtain the memory dump of the BIOS using either a software method (as shown in the following writeup or a hardware programmer.
Hashcat: Ensure you have Hashcat installed for brute-forcing the password.

Obtaining the Memory Dump

How to copy, read and write Paxton fobs and cards with an RFIDler

A newer version of this info is available at https://badcfe.org/how-to-paxton-with-rfidler/

Paxton fobs and readers are popular in the UK especially the Net2 system where the fobs look like this with a blue ring:

Paxton readers often look like this:

	The script requires Python3 and the packages `numpy`, `pandas` and `matplotlib`.
	It accepts a input file compatible with Mermaid (cf `bb.data`) and generates a PNG file.
	The tag `<br/>` is supported, so that a label can be displayed on several lines.
	I use the font `Humor Sans`, that can be installed via `apt install fonts-humor-sans`.


	export LANG=C

	TMP=`mktemp -d`
	umask 022
	mkdir -p $TMP/earlycpio
	mkdir $TMP/initramfs
	umask 077

	cd $TMP/earlycpio

	# Paths that we've already excluded via AppLocker.
	$exclusions = @()

	# Paths to process.
	$paths = @(
	"C:\Windows"
	)

	# Setup log.
	$log = "$PSScriptRoot\UserWritableLocations.log"

	#!/usr/bin/env python2

	import SimpleHTTPServer
	import SocketServer
	import logging

	PORT = 8000

	class GetHandler(SimpleHTTPServer.SimpleHTTPRequestHandler):

	#!/usr/bin/env python
	# Copyright (c) 2010 Erik Karulf ([email protected])
	#
	# Permission to use, copy, modify, and/or distribute this software for any
	# purpose with or without fee is hereby granted, provided that the above
	# copyright notice and this permission notice appear in all copies.
	#
	# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
	# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
	# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR