@PD0WM

I take things apart. Sometimes I put them back together. Consulting & Trainings: https://xitter.cf/t.co/HDoTb6QsAF

 The Netherlands
icanhack.nl
Joined June 2009
  • Tweets143
  • Following667
  • Followers2.9K
48Media
Willem Melching retweeted
hardwear.io@hardwear_ioJul 29
What does a car hacker's toolbox actually look like? Find out in this hands-on training with Willem Melching, where you'll work with real ECUs, reverse engineer firmware, and explore attacks on modern vehicle communication networks. Register now: lnkd.in/eTUrAuwJ
2
4
603
Willem Melching retweeted
hakstuff@hakstuffJan 31
This blog post ended up being a bit more industry-focused than I would have liked, but I wanted to do the research because I was curious what the adoption of bug bounty programs looked like in automotive! hakstuff.net/blog/car-hackin…

Car Hacking and Vulnerability Reporting in 2026 — HAKSTUFF

Now that we’re fresh into the start of 2026, I thought it would be interesting to take a look back at the state of automotive cybersecurity. To do this, I wanted to answer the question of: What is...

hakstuff.net
2
1
2
600
Willem Melching retweeted
hardwear.io@hardwear_io17 Jul 2024
An interesting talk at #hw_ioUSA2024 🚗 👨‍💻 that allows uploading a payload to RAM and getting the ECU to execute it. Using this exploit, @PD0WM and @gregjhogan could extract the SecOC keys. YouTube Link: youtu.be/8958gH3KD3Y?si=DSD5… #carhacking #secoc #reverseengieering
3
19
1,858
Check out my new blog, coauthored with @js0n37 Learn how we unlocked Renesas RH850 security by breaking 16-byte ID code authentication using Voltage Glitching to extract firmware on Automotive ECUs. Read the full article here: lnkd.in/d3zqKE6a #AutomotiveSecurity
4
20
1
43
5,751
Willem Melching retweeted
quarkslab@quarkslab30 Apr 2024
Fast and Curious: Emulating Renesas RH850 System-on-Chip using Unicorn Engine Brought to you by @virtualabs and @Phil_BARR3TT to make your automotive vulnerability research easier blog.quarkslab.com/emulating…
36
2
79
6,995
Willem Melching retweeted
Lennert@LennertWo21 Mar 2024
In 2022 we found vulnerabilities in dormakaba Saflok hotel locks. Reading one RFID card enables us to forge a pair of cards that open any door in that hotel! Dormakaba is currently working with its customers to fix the 3 million affected locks. wired.com/story/saflok-hotel…

Hackers Found a Way to Open Any of 3 Million Hotel Keycard Locks in Seconds

The company behind the Saflok-brand door locks is offering a fix, but it may take months or years to reach some hotels.

wired.com
1
38
8
141
38,737
Willem Melching retweeted
wrongbaud
@wrongbaud20 Oct 2023
New Blog Post! How to Build Your First Hardware Hacking Lab: voidstarsec.com/hw-hacking-l… Happy Friday!

VoidStar Security Wiki

VSS Hardware Hacking Wiki and Blog Entries

voidstarsec.com
4
56
1
149
23,095
Willem Melching retweeted
quarkslab@quarkslab21 Aug 2023
Breaking the Gecko's Secure Boot Firmware updates can fix vulns but who fixes the vulns in the update service? In our new blog post Sami Babigeon and @Mad5quirrel show why updating IoT firmware securely is hard, even when using state-of-the-art features. blog.quarkslab.com/breaking-…
A mean Gecko protecting firmware from a hacker. It's futile.

ALT A mean Gecko protecting firmware from a hacker. It's futile.

14
2
40
6,468
Willem Melching retweeted
blasty
@bl4sty21 Apr 2023
New blog post is up! Dumping the AMLogic A113X/A113D BootROM (and eFUSE/OTP data): haxx.in/posts/dumping-the-am…

Dumping the Amlogic A113X Bootrom

In this post we will exploit a memory corruption issue in AMLogic El3 code that is used by various consumer devices like the Sonos One (2nd generation) and the Lenovo Smart Clock. The goal is to get...

haxx.in
3
36
1
121
27,501
Willem Melching retweeted
Richard Johnson
@richinseattle4 Feb 2023
New p-code emulator for fuzzing based on ghidra sleigh. Full system fuzzing perf comparable to qemu, CmpLog support etc. Icicle: A Re-designed emulator for greybox firmware fuzzing arxiv.org/pdf/2301.13346.pdf github.com/icicle-emu/icicle
3
39
1
128
19,583
Willem Melching retweeted
carfucar@carfucar29 Oct 2022
Had a blast at the @hardwear_io hw ctf by @quarkslab. Our team #WeVoidWarrentied (@LennertWo , @PD0WM and myself) placed first. We completed 20 of the 21 challenges. As you can imagine I did the automotive challenge from @Phil_BARR3TT.. that may not have been fair!
3
12
2
43
Willem Melching retweeted
Lennert@LennertWo14 Mar 2022
Our paper and code covering physical attacks on the Texas Instruments CC13xx and CC26xx SimpleLink microcontrollers is available! Paper: eprint.iacr.org/2022/328.pdf Repository: github.com/KULeuven-COSIC/Si… Security advisory: ti.com/lit/an/swra739/swra73… Some details in this🧵
11
150
6
497
Willem Melching retweeted
hardwear.io@hardwear_io22 Feb 2022
⚙️If you read the blog series on how Willem hacked a VW Golf Power Steering ECU🚘then you will enjoy this podcast via @unnamed_show on Reverse Engineering Cars with Willem Melching @PD0WM 🚙unnamedre.com/episode/54 cc: @alvaroprieto @RebelbotJen #hardwear_io #hardwaresecurity

054 - It’s A Calibration, Not An Update!

Reverse Engineering Cars with Willem Melching

unnamedre.com
6
10
Willem Melching retweeted
Robbe Derks@robbederks13 Jan 2022
Took some tweaking to get it them to function, but here it is: fault injecting a fault injector! Thanks for the project @colinoflynn, now @PD0WM or I just need to find a proper use for them!
2
6
2
67
Willem Melching retweeted
Colin O'Flynn@colinoflynn22 Dec 2021
Something to finish off 2021 with a bang for you: It's now possible to build a (mostly safe) #EMFI tool for ~$50. Details are in the new 'PicoEMP' repository, including gerbers + design decision notes. Inspired from my @hackaday remoticon talk! github.com/newaetech/chipsho…
19
124
11
403
Willem Melching retweeted
Dibran Mulder@DibranMulder19 Aug 2021
You know whats fun about being a podcast host? Exploring new technologies! Upcoming monday we will have @PD0WM from @comma_ai in the @DevtalksPodcast show. Willem is the Head of OpenPilot do you have any questions for him?
2
1
8
EFM32 Gecko MCUs Unlocked 🔥 via Low-cost EMFI. Enjoy: limitedresults.com/2021/06/e… #EFM32 #SiliconLabs The list goes on.
10
101
11
371
Willem Melching retweeted
atc1441@atc144114 Jun 2021
locked nRF52840 firmware finally dumped, Archivemend unlocked! These 36 lines and an N-Channel Mosfet (BA7U2D) make an ESP32 Micro into a working nRF52 Power glitcher ☺️ Thanks to @LimitedResults and to @PD0WM for the inspiration and PC side script github.com/pd0wm/airtag-dump
6
24
2
141
Willem Melching retweeted
Denis Laskov 🇮🇱
@it4sec4 Mar 2020
Attacks on FlexRay are not that common, so each research is gold. Especially when tools are released as well. Credit to @comma_ai Team for good work. Blog: medium.com/@comma_ai/hacking… Saleae plugin for FlexRay: github.com/robbederks/FlexRa… Interceptor: github.com/pd0wm/flexray-int…

Hacking an Audi: performing a man-in-the-middle attack on FlexRay

Driving an Audi with a joystick by Injecting steering commands on the FlexRay bus

comma-ai.medium.com
1
13
34
Willem Melching retweeted
Engadget
@engadget13 Jul 2018
Comma.ai's driver assist system is a robot chauffeur for the rest of us engt.co/2NcQabf
20
2
42
Load more