PAYATU

Arun-Magesh

Ex-Bandit
Former Payatu bandit, working on IoT, firmware and hardware security and web and application security. Has authored 6 blogs, 1 talk/webinar for Payatu.
PAYATU

Arun-Magesh

Ex-Bandit
Former Payatu bandit, working on IoT, firmware and hardware security and web and application security. Has authored 6 blogs, 1 talk/webinar for Payatu.
Former Payatu bandit, working on IoT, firmware and hardware security and web and application security. Has authored 6 blogs, 1 talk/webinar for Payatu.
PAYATU

Arun-Magesh

Ex-Bandit

CVEs published

Vulnerabilities discovered and responsibly disclosed. Each links to the Payatu advisory.

Unauthenticated telnet service in niscomed patient Monitor

Open telnet port in niscomed patient monitoring device An issue was discovered on Niscomed Multipara Patient monitor M1000 devices.
Medical Devices
Authentication & Access Bypass
High
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Unautenticated UART port in niscomed patient monitoring device

Unautenticated UART port in niscomed patient monitoring An issue was discovered on Nescomed Multipara Monitor M1000 devices.The physical UART debug port provides a shell, without requiring a…
Medical Devices
Hardware / Firmware Exposure
Authentication & Access Bypass
Medium
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Lack of Medical data encryption in Dr.Trust ECG/EKG Pen

Lack of Medical data encryption in Dr.Trust ECG/EKG Pen.
Medical Devices
Information Disclosure
Medium
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Articles by  

Arun-Magesh

IoT & hardware
CTF & Learning
Exploit dev & reverse engineering
Raspberrypi As Poor Man’s Hardware Hacking Tool
December 14, 2018
7 mins
IoT & hardware
CTF & Learning
Exploit dev & reverse engineering
Researchers
Engineers
Guides & tutorials
IoT & hardware
Mobile
Web & API
“Find – Bluetooth Tracker” Responsible Vulnerability Disclosure
November 27, 2018
4 mins
IoT & hardware
Mobile
Web & API
Engineers
Researchers
Security leaders
Research & disclosures
IoT & hardware
Web & API
Mobile
Another Case Of A Vulnerable Smart Lock
October 22, 2018
4 mins
IoT & hardware
Web & API
Mobile
Engineers
Researchers
Research & disclosures
IoT & hardware
CTF & Learning
6 Device Penetration Testing Tools You Must Be Aware Of
November 22, 2017
6 mins
IoT & hardware
CTF & Learning
Engineers
Researchers
Guides & tutorials
IoT & hardware
Exploit dev & reverse engineering
Mobile
How I Reverse Engineered and Exploited a Smart Massager
November 21, 2017
9 mins
IoT & hardware
Exploit dev & reverse engineering
Mobile
Engineers
Researchers
Research & disclosures
Guides & tutorials

The Bandits

Conferences, podcasts and workshops.
Bandits
All

Abizer Naseem

Security Consultant
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Abizer Naseem

Security Consultant
Dark gray arrow pointing to the right on a transparent background.White arrow pointing diagonally upward to the right on a black square background.
All
Bandits

Ajay S.K

IoT Firmware Security Researcher
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Ajay S.K

IoT Firmware Security Researcher
Dark gray arrow pointing to the right on a transparent background.White arrow pointing diagonally upward to the right on a black square background.
All
Bandits

Akanksha Prasad

Co-Lead - Web Application
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Akanksha Prasad

Co-Lead - Web Application
Dark gray arrow pointing to the right on a transparent background.White arrow pointing diagonally upward to the right on a black square background.