Security researcher

California | México
I created a space to learn about payment systems: academy.salmg.net
2
8
30
1,725
I’ve been working on ATRIUM, a research workbench for EMV payment systems. It helps researchers observe APDUs, fingerprint cards, apply controlled mutations, and analyze contact, contactless, and ISO 8583 behavior. It’s also used in SM Academy for hands-on payments.
1
1
9
507
Hey @samykamkar, all these years later, I’m still telling people about you!
3
215
Now you can listen the modules 1 and 2 instead of reading them. Still editing the training, some updates: - Finished editing Module 1 and 2 in English and Spanish (including audio) - Added the VM for the training in module 2 - Still working on content: academy.salmg.net/curriculum…
1
1
243
Salvador Mendoza retweeted
Acabo de crear algo que siempre quise: un software de recuperación de archivos borrados, gratuito, open sorce, facil de usar, que no dependa de que alguien sepa usar linea de comandos: PhoinixDR · Open Source Data Recovery pcoronaf.github.io/PhoinixDR…
16
217
897
32,706
New blog post SIMtrace2 T-1 Research Project: salmg.net/2026/09/04/simtrac…
5
9
630
I created a space to learn about payment systems: academy.salmg.net
2
8
30
1,725
It is been a long time since this nitter.net/Netxing/status/1317332… So decided to built the ISO 7816-3 T=1 support into Osmocom's SIMtrace2 card emulator, hardware-verified EMV transactions, two terminal configs, three silent defects hunted down: github.com/salmg/SIMtrace2-T…
Caption this...
1
1
7
398
𝗧𝗵𝗲 𝗔𝗺𝗼𝘂𝗻𝘁 𝗧𝗿𝗮𝘃𝗲𝗹𝘀 𝗧𝘄𝗶𝗰𝗲 A payment carries the amount twice: the copy the network approves, and the copy the card signs. Nothing obliges anyone to compare them. New series, chapter 1: salmg.net/2026/08/27/the-amo…
1
258
I recall discussing this topic back in 2018... This is just the tip of the iceberg. The relay attack will expand to multiple nodes, & we are already seeing relays involving EMV contact data... The implementations used by authorizers and gateways will be put to the test.
🚨 WindRelay turns Android phones into live contactless payment proxies. Attackers use SpyNote access to silently install the NFC relay malware. When victims tap a physical card on the infected phone, WindRelay streams its NFC data in real time to a fraudster's device, enabling fraudulent payments. Read how it works: thehackernews.com/2026/08/wi…
6
419
Let's catch up!
2
10
1,130
Salvador Mendoza retweeted
This is it. The Proxmark5 promotional video is LIVE. Wireless. Modular. UHF-ready. Built from 10+ years of real-world RFID research. This isn’t just another tool, it’s the one you’ve been waiting for. Watch it. Then pledge. It's never gonna be this cheap again. 👇 indiegogo.com/projects/rfidr… #Proxmark5 #RFID #NFC #HardwareHacking
7
26
198
49,497
Salvador Mendoza retweeted
Everything in the Proxmark3 Iceman firmware. Every iCLASS, SEOS, Mifare, UL-AES, FeliCa update. Every late night debugging session. None of it is sponsored. All of it is open source. If it has saved you time or taught you something, consider buying me a coffee. Patreon this week: promo code 82409 for a discount. patreon.com/iceman1001 #Proxmark3 #RFID #OpenSource #InfoSec
2
24
114
6,052
Any plans for training sessions during or before the event @_TROPICON ?
1
2
564
Salvador Mendoza retweeted
+15 years in the making. Now it’s real: Tropicon, April 17–18, 2026 — Cozumel. Escape the noise, secure the future. #TROPICON
1
31
52
7,405
See you in Vegas?
2
1
4
973
Thank you @huggingface for all your support. My bot S1 AI is already up and running to keep informed about the Los Angeles Fire situation using the official information from @LAFD. lafire.chat/ salmgq-s1ai.hf.space/
5
1,212