dr.chaos

~/blog

Articles

Every transmission from the lab — adversarial AI research, offensive security tutorials, threat analysis, and the legacy Dr. Chaos archive.

231 articles

When Baby Monitors Are a Model For IoT Security

There are several baby monitors that have come on the market recently with remote viewing capabilities, motion detection, and temperature sensors. These are great tools that give parents peace of mind, but with the proliferation of the Internet of Things and manufactures designing products for funct

Aamir Lakhani4 min read

Why I can’t win from a claw machine (and neither can you)

You’ve seen them. They are the cranes we use to try to snatch prizes, commonly referred to as claw machines. They are found in arcades, restaurants, and other establishments. Sometimes they have valuable prizes, and other times….not so much. In either case it is easy to get addicted to them. You thr

Aamir Lakhani4 min read

Mitre ATT&CK Con

We just got back from Mitre ATT&CK Con. Tony G and Dr. Chaos were both impressed. Let's talk about creating and testing the ATT&CK framework.

Aamir Lakhani1 min read

Don't Jack my Crypto

Tony G and Dr. Chaos discuss crypojacking - is it really a problem? How does it lead to greater security threats? What does it really mean for enterprise organizations? Join us for the Dr. Chaos podcast

Aamir Lakhani1 min read

MITRE and RUNDLL

Aamir Lakhani and Tony G talk around MITRE ATT&CK methodology and malware embedded in DLL

Aamir Lakhani1 min read

Crypto Botnets

Aamir Lakhani and "Tony G" discuss the latest techniques in new botnets with hive like awareness.

Aamir Lakhani1 min read

Dr. Chaos Podcast - CryptoJacking

Is CryptoJacking really that bad? What about sites that are asking for user's permission before they mine? Tony G and Dr. Chaos discuss CryptoJacking.

Aamir Lakhani1 min read

Hunting the Hunter

Organizations of all sizes continue to be targets of cyber criminals and the threats that they present. However, some organizations are taking a proactive approach and are hunting for these threats. But what exactly is “threat hunting"? How does it fit into the SOC? Should my organization be threat

Aamir Lakhani1 min read

Hacking A Car Is No More Just An Idea! It Exists

Hacking A Car Is No More Just An Idea! It ExistsIncorporation of the latest technology in cars has made these machines the biggest computers on earth. The speed of these computers can be a 200 KM/ Hour that is actually awesome. If you want to stop it, you need to be a supercomputer. Do you accept t

Aamir Lakhani4 min read

Clark-Wilson Security Model

The Clark-Wilson security model is based on preserving information integrity against the malicious attempt of tampering data. The security model maintains that only authorized users should make and be allowed to change the data, unauthorized users should not be able to make any changes, and the syst

Aamir Lakhani2 min read

How to Hack an Elevator

Express Mode Elevator Express Trick 1 Press the floor button and the close button at the same time for 5-6 seconds and the elevator will be in express mode. This will also skip any stops and go directly to your floor. This was successful on Dover and Otis elevators. It supposed to work on most O

Aamir Lakhani1 min read