PAYATU

Arun-Magesh

Ex-Bandit
Former Payatu bandit, working on IoT, firmware and hardware security and web and application security. Has authored 6 blogs, 1 talk/webinar for Payatu.
PAYATU

Arun-Magesh

Ex-Bandit
Former Payatu bandit, working on IoT, firmware and hardware security and web and application security. Has authored 6 blogs, 1 talk/webinar for Payatu.
Former Payatu bandit, working on IoT, firmware and hardware security and web and application security. Has authored 6 blogs, 1 talk/webinar for Payatu.
PAYATU

Arun-Magesh

Ex-Bandit

CVEs published

Vulnerabilities discovered and responsibly disclosed. Each links to the Payatu advisory.

DoS in aedes MQTT broker

DoS on aedes broker because of incorrect error handling A specifically crafted payload which has published header and message length as 0 is sent to the server which crashes the server because of the…
IoT & Hardware
Denial of Service
High
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Apache Artemis - XSS Over MQTT

Stored XSS in Apache Artemis In Apache ActiveMQ Artemis 2.5.0 to 2.13.0, a specially crafted MQTT packet which has an XSS payload as client-id or topic name can exploit this vulnerability.
IoT & Hardware
Cross-Site Scripting (XSS)
Medium
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Lack of Medical data encryption and integrity in Niscomed Multipara Patient Monitor

Lack of User’s Medical data encryption and integrity An issue was discovered on Nescomed Multipara Monitor M1000 devices.
Medical Devices
Information Disclosure
High
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Talks & appearances

Conferences, podcasts and workshops.
Introduction to IoT Reversing - Firmware | Payatu Webinar
Arun Magesh
View Details
White arrow pointing diagonally up and right on black background.White arrow pointing diagonally up and right on black background.
21-05-2020
How to fail in Hardware Hacking
View Details
White arrow pointing diagonally up and right on black background.White arrow pointing diagonally up and right on black background.
21-05-2019
Exploiting Bluetooth Low Energy
View Details
White arrow pointing diagonally up and right on black background.White arrow pointing diagonally up and right on black background.
7-8 Nov 2017

Articles by  

Arun-Magesh

IoT & hardware
CTF & Learning
Exploit dev & reverse engineering
Raspberrypi As Poor Man’s Hardware Hacking Tool
December 14, 2018
7 mins
IoT & hardware
CTF & Learning
Exploit dev & reverse engineering
Researchers
Engineers
Guides & tutorials
IoT & hardware
Mobile
Web & API
“Find – Bluetooth Tracker” Responsible Vulnerability Disclosure
November 27, 2018
4 mins
IoT & hardware
Mobile
Web & API
Engineers
Researchers
Security leaders
Research & disclosures
IoT & hardware
Web & API
Mobile
Another Case Of A Vulnerable Smart Lock
October 22, 2018
4 mins
IoT & hardware
Web & API
Mobile
Engineers
Researchers
Research & disclosures
IoT & hardware
CTF & Learning
6 Device Penetration Testing Tools You Must Be Aware Of
November 22, 2017
6 mins
IoT & hardware
CTF & Learning
Engineers
Researchers
Guides & tutorials
IoT & hardware
Exploit dev & reverse engineering
Mobile
How I Reverse Engineered and Exploited a Smart Massager
November 21, 2017
9 mins
IoT & hardware
Exploit dev & reverse engineering
Mobile
Engineers
Researchers
Research & disclosures
Guides & tutorials

The Bandits

Conferences, podcasts and workshops.
Bandits
All

Abizer Naseem

Security Consultant
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Abizer Naseem

Security Consultant
Dark gray arrow pointing to the right on a transparent background.White arrow pointing diagonally upward to the right on a black square background.
All
Bandits

Ajay S.K

IoT Firmware Security Researcher
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Ajay S.K

IoT Firmware Security Researcher
Dark gray arrow pointing to the right on a transparent background.White arrow pointing diagonally upward to the right on a black square background.
All
Bandits

Akanksha Prasad

Co-Lead - Web Application
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Akanksha Prasad

Co-Lead - Web Application
Dark gray arrow pointing to the right on a transparent background.White arrow pointing diagonally upward to the right on a black square background.
Dark scene with vertical thin orange lines resembling distant illuminated bars or streaks against a black background and a faint horizontal red glow near the bottom.

Impressed by the work? Point it at your systems.

Bring the research depth behind these advisories to your own product, app or infrastructure.

Talk to an expert
White arrow pointing diagonally upward to the right on a black square background.White arrow pointing diagonally upward to the right on a black square background.White arrow pointing diagonally upward to the right on a black square background.
Black downward arrow on a white background.Black downward arrow on a white background.
Explore our research
White arrow pointing diagonally upward to the right on a black square background.White arrow pointing diagonally upward to the right on a black square background.
This is the default text value
White arrow pointing diagonally upward to the right on a black square background.White arrow pointing diagonally upward to the right on a black square background.
This is the default text value
White arrow pointing downward on a dark background.White arrow pointing downward on a dark background.
This is the default text value
White arrow pointing downward on a dark background.White arrow pointing downward on a dark background.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.