3 ms·
This is ridiculous. You need to steal the hardware, analyse the specific model, build a machine for it and manipulate it and then bring it back to the original
by imtringued 3y ago
This is ridiculous. You need to steal the hardware, analyse the specific model, build a machine for it and manipulate it and then bring it back to the original user and then steal it again after he has entered his credentials and then you have to use a dedicated machine to perform the actual attack and you only have one attempt.
- ilyt 3y agoIf it is a laptop, yeah, not super practical, but there are plenty of devices secured by encrypted firmware that gets decoded on boot and stored in memory
- wongarsu 3y agoYeah, way more practical for servers in a datacenter than for a random laptop you confiscated. Though tooling for each of the most recent iPhones might also be worth it
- bri3d 3y agoWrong use case. It's a reverse engineering tool to extract firmware, secrets, and code to develop and exploit, not an exploit in and of itself. This would be a horrendous way to recover user credentials but it's a great way to recover encrypted firmware, session/authorization/authentication keys derived in "Secure World" on embedded systems, and static runtime secrets decrypted using a derived key (key vaults, etc.).