Posts

Showing posts from 2023

Featured Post

ESP32 SDR: from failed 433 MHz experiments to live phone decoding

Image
An ESP32-S3 investigation, updated with live Android decoding and physical tests on 17 October 2026. An ESP32-S3 can expose real radio samples. The question is how far that capability carries toward useful applications. Conceptual illustration. I wanted to turn an ESP32 into something more ambitious than another Wi-Fi gadget: a small radio instrument that could capture a remote-control transmission, send the recording to a phone, decode it and eventually reproduce it. The starting point was the ESPARGOS esp-sdr project , which exposes raw radio samples from hardware already inside supported ESP32 chips. That is an exciting capability. It also raises an easy-to-misunderstand question: if software can ask the chip to tune to a frequency, can the chip actually receive useful information there? We tested that question through firmware changes, controlled radio transmissions, independent receivers and a Flutter phone app. We tried GPS, broadcast FM, 433 MHz remote-control signals, n...

Re-Post : How I managed to gain access to The Indian Digital treasure – 3 Billion documents on Digilocker

Image
 Hi Guys, This is a repost of the blog that was written on  https://yetanothersec.com/blog/2020/06/03/digilocker-disclosure/  as the yas portal is facing technical issues everynow and then. Also apologies for the bad quality of screen shots, i will find old files and update it later. D uring the beginning of May 2020, there was a large commotion about the arogyasetu app and its security after a so called “hack” by infamous political hacker named Elliot Alderson. In light of all this, we at the YAS (Yet Another Security) community, had some talks in our WhatsApp group. So, it turned out to be a discussion on techniques used for bypassing SSL pinning on the mobile apps. This whole discussion made be curious about other apps from India government and since I have worked on similar projects outside of India, digilocker caught my attention. Hence, I downloaded the app and installed on my test devices and fired up my favorite toolset burpsuite + Frida. I used my homebrewed pinn...