semaja2

Introduction Cloudflare has been increasing the capabilities of their Zero Trust product over the years, initially network connectivity was formed via local reverse proxies (cloudflared) that would tunnel back to the Cloudflare infrastructure, eventually…

Overview Following the previous post on the BSides Adelaide 2026 hardware badge, we recall that a potential UART connection was found on the rear of the badge.

Overview Attending my second BSides Adelaide conference, once again was excited to grab the hardware badge and knock out some challenges.

Introduction I recently attended CyberCon 2025 in Melbourne, where NAB (National Australia Bank) was handing out USB “data blocker” devices as promotional items.

Introduction Generally network devices have their logs ingested into a central logging system through the industry standard syslog.

Executive Summary Following the initial disclosure of the unauthenticated RCE vulnerability in Siklu EtherHaul devices (CVE-PENDING), further investigation revealed that the same vulnerable rfpiped service on TCP port 555 can be exploited for arbitrary fi…

Executive Summary The Ceragon/Siklu EtherHaul series devices are vulnerable to an unauthenticated remote command execution (RCE) vulnerability.

Overview Taking a break from the security research, I recently attended the BSides Adelaide conference and obtained a hardware badge full of challenges, this post is a write up of the various challenges and how they were solved.

Overview During the early stages of the investigation of the Siklu EH-8010 it became apparent the devices were using the same static root password which was previously discovered on the Siklu TG series.

Overview In this post I wanted to dig into the methodology I used to understand how a vendor (Siklu) encrypts their firmware images, and from that hopefully extract the keys and reverse the process to enable easier analysis of firmware files.