I’ve been working on ATRIUM, a research workbench for EMV payment systems.
It helps researchers observe APDUs, fingerprint cards, apply controlled mutations, and analyze contact, contactless, and ISO 8583 behavior.
It’s also used in SM Academy for hands-on payments.
1
1
9
507
Now you can listen the modules 1 and 2 instead of reading them. Still editing the training, some updates:
- Finished editing Module 1 and 2 in English and Spanish (including audio)
- Added the VM for the training in module 2
- Still working on content: academy.salmg.net/curriculum…
1
1
243
It is been a long time since this nitter.net/Netxing/status/1317332…
So decided to built the ISO 7816-3 T=1 support into Osmocom's SIMtrace2 card emulator, hardware-verified EMV transactions, two terminal configs, three silent defects hunted down: github.com/salmg/SIMtrace2-T…
1
1
7
398
I created a space to learn about payment systems: academy.salmg.net
2
8
30
1,725
Thank you @huggingface for all your support.
My bot S1 AI is already up and running to keep informed about the Los Angeles Fire situation using the official information from @LAFD.
lafire.chat/
salmgq-s1ai.hf.space/
5
1,212
Thank you for your feedback. Now you can interact with the chatbot, and I already added evacuation maps information from @LAFD
1
3
558
Eres estudiante y te gustaría asistir a la conferencia de Ciberseguridad mas importante de Colombia: @DragonJARCon este 26 y 27 de septiembre?
Envíame un correo electrónico mencionando el por qué o cómo el asistir a está conferencia ayudaría en tu carrera profesional. Si eres seleccionado, te hare llegar una entrada electrónica gratis para el evento.
Nota importante: El boleto electrónico solo cubre eso, el poder ingresar al evento. Es preciso mencionar que no cubre hospedaje, ni transporte, ni cualquier otro gasto.
Si gustas participar envíame un correo a salvador.mendoza@metabaseq.com
Solo cuento con dos entradas gratis. Así que aprovecha. Los ganadores recibirán su boleto electrónico a mas tardar este viernes 20 de septiembre.
1
5
6
1,007
New Blog Post: "Packet Boundary Flag & NFC Controller Interface"
The PBF focuses on the technical side of breaking down and transmitting data in smaller pieces, while extended APDUs manage large data commands in their entirety. This innovative approach is particularly valuable for researchers and developers exploring new possibilities in NFC technology.
salmg.net/2024/08/30/packet-…
3
7
1,177
I noticed a few years ago the Gauss Key Card open project for Tesla cards: github.com/darconeous/gauss-…
I started designing my approach with Python using the Gauss Key project as reference. Wondering if you have the opportunity to take a look to see if it meets the elliptic-curve cryptografic requirements for Tesla cards. This is my approach: colab.research.google.com/dr…
1
2
5
1,048
We continue in @WEareTROOPERS. Talking about life and cybersecurity experiences with @IgNavarro1
1
3
10
1,310
Taking a look at the new badge. One of the most interesting parts is the NFC module to communicate with other people!
1
162
How I prepare myself for an international conference such as @WEareTROOPERS:
- Something to keep working
- Something to drink
- Something to play with
Happy hacking!
6
559
Finishing with the Payment System training at @WEareTROOPERS. Everything is ready for the conference! See you there!
1
4
23
1,953
Thrilled to announce @MetabaseQ 2nd consecutive year at Black Hat USA Trainings!
This year, we're taking it a step further with our "Payment Systems Training" - a deep dive into the complexities of banking data formats including ISO8583, EMV, NFC, Tokenized data, and Magstripe information: blackhat.com/us-24/training/…
Our approach goes beyond the tools; we delve into the methodologies and communication protocols that form the backbone of these technologies. This foundational perspective promises a robust understanding, empowering you to not just use the tools but to think out of the box.
Expect hands-on sessions that throw you into the thick of real-world scenarios, challenging you to think like an attacker and a defender within the realm of EMV/PCI standards. How would you navigate, exploit, or bypass security mechanisms? What countermeasures can you anticipate and strategize against? Join us!! #BHUSA @BlackHatEvents
3
11
1,291
"Unlocking doors from half a continent away: A relay attack against HID Seos"
eprint.iacr.org/2023/450.pdf
A great research using my reblay standalone mode with the github.com/RfidResearchGroup… #proxmark3 project
1
6
21
2,590
My first GPT! Unlock the full potential of digital payment security with Sentinel GPT. Exclusive to ChatGPT Plus members, this version lets you dive deep into the world of Payment Systems, guided by the knowledge from my spanish-written book: "Show me the (e-) money: Hacking Digital Payment Systems - NFC, RFID, MST, and EMV Chips." Engage, learn, and explore with Sentinel GPT! bit.ly/3QIbOq9
#GPT #payments #paymentsecurity
1
7
35
5,001
Estarás participando en @BugCON este mes de noviembre y te interesa ser parte del workshop NLPs y NERs el dia 23?
En este taller exploraremos el emocionante mundo del Procesamiento del Lenguaje Natural (NLP) y el Reconocimiento de Entidades Nombradas (NER) en el ámbito del Machine Learning.
Para agilizar el proceso de accesos al laboratorio, favor de completar el formulario antes del 20 de noviembre. Este proceso no solo nos ayudará a agilizar el acceso a la plataforma durante el día del workshop, sino que también nos permitirá personalizar el contenido.
El formulario es breve y se puede acceder a través del siguiente enlace: forms.gle/3cwKWNRxnyPdgFcLA
Si tienes alguna pregunta no dudes en contactarme.
Nos vemos en BugCON 2023!
6
15
2,545
Special gifts from #defcon community. Thank you for all your support in this incessant research journey!
1
1
25
2,208
@verovaleros in action at #BHUSA Arsenal talking about "AI VPN: A Free-Software AI-Powered Network Forensic Tool"
3
13
962
Happy to announce that my upcoming training on "Payment Systems: The Art of Analyzing Mag-stripe, Tokenization, NFC and EMV Technologies" will be at @BlackHatEvents
During this comprehensive session, we are set to delve deep into the contemporary threats and vulnerabilities that loom over payment systems in today's digital age. We will not only theorize but also engage in hands-on practical exercises using specific hardware, simulating real-life scenarios to understand these threats at a granular level. Our discussion will extend to the analysis of actual attack environments, examining their strategies, patterns, and techniques. This balanced blend of theory and practice aims to equip participants with the knowledge and skills necessary to safeguard critical payment environments. Join us!
August 5-6: blackhat.com/us-23/training/…
or
August 7-8: blackhat.com/us-23/training/…
#BHUSA
3
9
34
4,400
🚀 ¿Alguna vez te has preguntado cómo funcionan los modelos de #MachineLearning y qué hay detrás de los increíbles modelos GPT? ¡Sumérgete conmigo en este fascinante hilo para descubrirlo y aclarar algunas desinformaciones comunes en el mundo de la #IA! #GPT #NLP
1
3
10
2,120
Very interesting tutorial about Osmocom Simtrace2 tool:
piped.video/watch?v=VZrpKQOB…
2
5
12
1,437
I'm thrilled to announce that my upcoming training on "Payment Systems: The Art of Analyzing Mag-stripe, Tokenization, NFC and EMV Technologies" will be at @BlackHatEvents US 2023!! First time that we, @MetabaseQ, will be participating in this category!
In this session, we'll explore the latest threats and vulnerabilities facing payment systems. Real hands-on practices with hardware for specific scenarios. We will discuss real attack environments and follow practical strategies for protecting against them. Join us to any of our two sessions!
August 5-6: blackhat.com/us-23/training/…
or
August 7-8: blackhat.com/us-23/training/…
#BHUSA
8
32
3,670
Blog post to show how to modify the #flipperzero Bluetooth MAC Address: salmg.net/2023/02/03/flipper…
1
31
192
27,078
"Esta en nosotros ayudar a proteger a la sociedad civil" una presentación impresionante de todos los datos que se envían a internet desde nuestros dispositivos móviles. @verovaleros y @eldracote, nos recuerdan que "El internet no olvida"
3
5
Hey @samykamkar, wish you had seen the @DBorgogno & @accio_bugs mPos research. Among different attacks, they used magspoof as cvv brute force tool to test an inadequate implementation!
clarin.com/tecnologia/ekopar…
cc @ekoparty
2
4
15