Sign in

Sam

@bespokebugs.bsky.social
32 followers 31 following 6 posts

Principal Research Consultant at Atredis Partners

PostsRepliesMedia
Reposted by Sam
Atredis Partners @atredispartners.bsky.social · 18/09/2026
Atredian Matt Burch (@emptynebuli.bsky.social) will be presenting his ATM supply chain research and demonstrating new exploitation tooling at #GrrCon! 📅 Friday, Sept 25 @ Noon 🔗 Abstract: buff.ly/GvZm49g
023
Reposted by Sam
Atredis Partners @atredispartners.bsky.social · 28/07/2026
Next week at @blackhatofficial.bsky.social, join Matt Burch (@emptynebuli.bsky.social) as he dives into the ATM supply chain. If you are attending Black Hat, add this to your schedule! 📅 AUG 5 at 2:35 PM 📍 South Seas C&D, Level 3 #BHUSA2026 #Cybersecurity #InfoSec #BlackHat
blackhat.com
Black Hat USA 2026
Black Hat USA 2026
012
Reposted by Sam
Atredis Partners @atredispartners.bsky.social · 21/07/2026
If you are heading to @defcon.bsky.social this summer, don't miss Atredian Matt Burch (@emptynebuli.bsky.social) and his continued CryptoPro research in Compounding Interest: Exploiting the ATM Supply Chain. See you at Track 4, Saturday Aug 8 at 12:30. defcon.org/html/defcon-...
defcon.org
DEF CON® 34 Hacking Conference - Main Stage Talks
1.1 Million Cameras, One Wildcard: Architectural Surveillance in an IoT Cloud Sammy Azdoufal
003
Reposted by Sam
Atredis Partners @atredispartners.bsky.social · 13/07/2026
@defcon.bsky.social 32 Matt (@emptynebuli.bsky.social) released 6 CE bugs affecting Diebold Nixdorf.. and now he is back with 9 more via the CryptoPro supply chain! 👀 Come join his #BHUSA briefing on Wednesday August 5th - you won't want to miss it! 🏧 🏦 @blackhatofficial.bsky.social
blackhat.com
Black Hat USA 2026
Black Hat USA 2026
013
Reposted by Sam
Atredis Partners @atredispartners.bsky.social · 16/05/2026
"Bad News for the Average Pentester" ... But who wants to be average? Here's some thoughts from Shawn on why Human-Powered Pentesting is here to stay. www.atredis.com/blog/2026/5/...
atredis.com
Bad News for the Average Pentester — Atredis Partners
With the changes to the market of late, Atredis has actually been exceedingly busy. We've been working with AI and related tech since we started the company over a dozen years ago, but in the last…
035
Reposted by Sam
Atredis Partners @atredispartners.bsky.social · 12/03/2026
We decided to revisit an old research problem with some new LLM powered tooling. Check out our latest blog post to see how we approached this research, and the new Java deserialization gadget chains it discovered in just two days! www.atredis.com/blog/2026/3/12/findings-gadgets-like-its-2026
atredis.com
Findings Gadgets Like it’s 2026 — Atredis Partners
Java deserialization vulnerabilities have been of interest to me for nearly a decade. In 2016, my team published a blog post titled "What Do WebLogic, WebSphere, JBoss, Jenkins, OpenNMS, and Your…
045
Reposted by Sam
Atredis Partners @atredispartners.bsky.social · 26/02/2026
On a recent engagement, we exploited a previously disclosed privilege escalation bug in Tenable's Nessus Agent. No public PoC was available, so we made one; check it out here github.com/atredispartn...
github.com
proof-of-concept/cve-2025-36632 at main · atredispartners/proof-of-concept
Proof of concepts and other snippets. Contribute to atredispartners/proof-of-concept development by creating an account on GitHub.
034
Reposted by Sam
Atredis Partners @atredispartners.bsky.social · 12/12/2025
Last week, hardware. This week, firmware! Sam is back with a deep dive into his LiDAR Detector and demos a couple prototypes! www.atredis.com/blog/2025/12...
024
Sam @bespokebugs.bsky.social · 12/12/2025
The second post about my LiDAR Detector: www.atredis.com/blog/2025/12...
atredis.com
Designing a Passive LiDAR Detector Device - Firmware — Atredis Partners
Welcome back! In the last post I described the process of examining the iPhone Pro TrueDepth LiDAR and developing concepts for hardware to detect it. Here I will describe the firmware for this devi...
000
Sam @bespokebugs.bsky.social · 05/12/2025
look what you made me do, @sa.my www.atredis.com/blog/2025/11...
atredis.com
Designing a Passive LiDAR Detector Device - Hardware — Atredis Partners
At DEF CON 32, Samy Kamkar gave a talk about laser microphones. That was the only talk I made a point to watch live that year. Kamkar never disappoints and I have fond memories of trying to use a lase...
120
Reposted by Sam
Atredis Partners @atredispartners.bsky.social · 05/12/2025
Say Cheese, Computer! Designing a Sensor for Passive Detection of iPhone TrueDepth LiDAR www.atredis.com/blog/2025/11/20/designing-a-passive-lidar-detection-sensor
013
Sam @bespokebugs.bsky.social · 13/11/2025
www.atredis.com/blog/2025/9/...
atredis.com
Drawbot: Let’s Hack Something Cute! — Atredis Partners
The Target A few months ago I realized I was overdue for a fun, quirky hardware project. Every so often I like to see what new and interesting electronic children's toys are out there. When looking, ...
010
Reposted by Sam
Atredis Partners @atredispartners.bsky.social · 13/11/2025
Let's Hack Something Cute! A Reverse Engineering Journey into the Drawbot with Jessie www.atredis.com/blog/2025/9/...
atredis.com
Drawbot: Let’s Hack Something Cute! — Atredis Partners
The Target A few months ago I realized I was overdue for a fun, quirky hardware project. Every so often I like to see what new and interesting electronic children's toys are out there. When looking,…
033
Reposted by Sam
samy k͓͓͓͓͓͓͓͓͓͓͓͓͓͓͓amkar͛͛͛͛͛͛͛͛͛͛͛͛͛͛͛ @sa.my · 17/10/2024
DEF CON 32 video (Optical Espionage: Using Lasers to Hear Keystrokes Through Glass Windows) and code/DSP/hardware released for high-fidelity RF-modulated laser microphone that converts infrared light into keystrokes github.com/samyk/rflase...
github.com
GitHub - samyk/rflasermic: RF-modulated high fidelity laser microphone and keystroke sniffer
RF-modulated high fidelity laser microphone and keystroke sniffer - samyk/rflasermic
1133
Sam @bespokebugs.bsky.social · 27/08/2025
@sa.my hey buddy, big fan. i was watching your DEFCON32 talk about laser mics and such back then and toward the end when you talked about the lidar on your iphone, it inspired me to make a truedepth lidar detector! id love to show you a demo. thanks for inspiring me all these years!
020
Reposted by Sam
Atredis Partners @atredispartners.bsky.social · 27/06/2025
Be sure to watch Matt Burch's (@emptynebuli.bsky.social) @CypherCon.bsky.social talk, Where's the Money: Defeating ATM Disk Encryption! buff.ly/wWaSlle
022
Reposted by Sam
Atredis Partners @atredispartners.bsky.social · 09/07/2025
We recently identified a number of privilege escalation vulnerabilities in Lenovo Vantage on Windows; check out our latest blog for a technical deep dive www.atredis.com/blog/2025/7/...
atredis.com
Uncovering Privilege Escalation Bugs in Lenovo Vantage — Atredis Partners
Atredis Partners is an advanced security services and research consulting firm.
035
Reposted by Sam
Atredis Partners @atredispartners.bsky.social · 27/05/2025
Where do the Ads in Trackmania come from? In-game ads and reverse engineering tips in this mini-post from Jordan www.atredis.com/blog/2025/5/...
atredis.com
A Peek into an In-Game Ad Client — Atredis Partners
A little bit ago I re-installed the racing game Trackmania, and I noticed I got product ads displayed at me in-game alongside the racetrack. Where were those coming from?
023
Reposted by Sam
Atredis Partners @atredispartners.bsky.social · 09/05/2025
In case you missed it. Don't miss @emptynebuli.bsky.social presenting at #HackSpaceCon in Cape Canaveral on May 14th! 💰 🚀 buff.ly/tRaisC8
001
Reposted by Sam
Atredis Partners @atredispartners.bsky.social · 09/05/2025
Don’t miss Atredian Bill Carver talking about Ransomware Readiness @bsidesbuffalo.bsky.social - Hope to see you there on June 7th!
bsides-buffalo-2025.sessionize.com
BSides Buffalo 2025
Mobile app & schedule website
002
Reposted by Sam
Atredis Partners @atredispartners.bsky.social · 02/05/2025
Don't miss @emptynebuli.bsky.social presenting at #HackSpaceCon in Cape Canaveral on May 14th! 💰 🚀 No ticket? No Problem! 👀 We have a few extra 👀 Reply to the post and we will hook you up! buff.ly/tRaisC8
021
Reposted by Sam
Atredis Partners @atredispartners.bsky.social · 25/04/2025
Sam @bespokebugs.bsky.social wanted to answer the question "can you 3D print pogo pin harnesses?" So, he ran some experiments this week to find out. Check out the blog post and grab the models to try for yourself! atredis.squarespace.com/blog/2025/4/... #pogopin #probe #3dprinting #atredis
014