Rediscovering the f00dbabe Firmware Update Issue - Hardware Wallet Research #7

Rediscovering the f00dbabe Firmware Update Issue - Hardware Wallet Research #7

Channel:
United States LiveOverflow
Subscribers:
920,000
Published on ● Video Link: https://www.youtube.com/watch?v=2H45HheGkKM


Category:
Vlog
Duration: 13:01
43,547 views
1,495

We finally figure out how to create a firmware update, but we run into an annoying check. But based on what we have learned so far, we can find a bypass - rediscovering the f00dbabe issue.

research: https://wallet.fail

DISCLAIMER: The security research shown here was done a while ago and since then the software and hardware was updated; These videos are not sponsored or endorsed by Ledger.

-=[ ❤️ Support ]=-

→ per Video: https://www.patreon.com/join/liveoverflow
→ per Month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join

-=[ 🐕 Social ]=-

→ Twitter: https://twitter.com/LiveOverflow/
→ Website: https://liveoverflow.com/
→ Subreddit: https://www.reddit.com/r/LiveOverflow/
→ Facebook: https://www.facebook.com/LiveOverflow/

-=[ 📄 P.S. ]=-

All links with "*" are affiliate links.
LiveOverflow / Security Flag GmbH is part of the Amazon Affiliate Partner Programm.

#HardwareSecurity #ReverseEngineering



Other Videos By LiveOverflow


2019-04-28Business, Money, 300k Subscribers and What's Next
2019-04-21GitLab 11.4.7 Remote Code Execution - Real World CTF 2018
2019-04-14Fuzzing Browsers for weird XSS Vectors
2019-04-07How did Masato find the Google Search XSS?
2019-04-01[Live] Pen-Testing and Story Time
2019-03-31XSS on Google Search - Sanitizing HTML in The Client?
2019-03-24Weird Return-Oriented Programming Tutorial - bin 0x2A
2019-03-17Introducing Weird Machines: ROP Differently Explaining part 1 - bin 0x29
2019-03-10Ethereum Smart Contract Backdoored Using Malicious Constructor
2019-03-06[Live] GHIDRA HYPE!! - NSA Reverse Engineering Tool
2019-03-03Rediscovering the f00dbabe Firmware Update Issue - Hardware Wallet Research #7
2019-02-24Analysing a Firefox Malware browserassist.dll - FLARE-On 2018
2019-02-17What is a Security Vulnerability?
2019-02-11Games & Results: Gynvael's Winter GameDev Challenge 2018/19
2019-02-10APDU Communication between Device and Host - Hardware Wallet Research #6
2019-02-05Forensics with fls, Volatility and Timeline Explorer - ft. 13cubed
2019-02-01Identify Bootloader main() and find Button Press Handler - Hardware Wallet Research #5
2019-01-25Setup and Find Entry-point in ARM Firmware - Hardware Wallet Research #4
2019-01-21XS-Search abusing the Chrome XSS Auditor - filemanager 35c3ctf
2019-01-21[Live] Making-of a LiveOverflow CTF video write-up 2019 (35c3ctf)
2019-01-18Remote Debugging ARM Chip with SWD/JTAG - Hardware Wallet Research #3


Tags:
Live Overflow
liveoverflow
hacking tutorial
how to hack
exploit tutorial
f00dbabe
foodbabe
bootloader
firmware update
arm
hardware wallet
crypto currency
apdu
usb
update verification
bypass
bitfi
ledger
trezor
keepkey
wallet.fail
wallet fail
chip
stm32
gdb
swd
jtag
hardware security
reverse engineering
ida pro