3️⃣This dumping process took around 2.5 minutes. The dump matched the "BIOS ROM file" which I extracted from the Z170-AR-ASUS-3801.CAP (downloaded from ASUS' website) using UEFITool.

Note: This board uses the ASM1142 USB 3.0 chip which has its own over current (OC) detection. I couldn't find the BoardView for my Z170-AR 1.03 motherboard and hence I had to pause the hardware debugging process at this point.

Next, switching to the SW sides of things, I was able to patch the ASUS BIOS using UEFITool, GHIDRA, Cutter (Rizin GUI), and WinHex to bypass this USB OC error message (and the subsequent PC hang)!

binwalk -eM bios.rom # bios.rom is extracted from UEFItool.

[user@random _flash-me.rom.extracted]$ find . -type f -exec strings {} \; | grep "USB Device"
USB Device Over Current Status Detected !!

4️⃣I wrote the modded BIOS back using the following command,

$ sudo ./flashrom --programmer ch341a_spi -v 1402_modded_working.rom
flashrom v1.2-169-g10d71d9 on Linux 5.8.0-33-lowlatency (x86_64)
flashrom is free software, get the source code at https://flashrom.org

Using clock_gettime for delay loops (clk_id: 1, resolution: 1ns).
Found Winbond flash chip "W25Q128.V" (16384 kB, SPI) on ch341a_spi.
Verifying flash... VERIFIED.
...
After patching the BIOS, I was able to boot into the system! After logging in, I was able to confirm that ASM1142 chip is generating those OC (Over Current) signals.

$ sudo dmesg | grep over-cu
[ 1.082715] usb usb4-port2: over-current condition
[ 1.086705] usb usb3-port2: over-current condition
$ lspci
...
00:14.0 USB controller: Intel Corporation 100 Series/C230 Series Chipset Family USB 3.0 xHCI Controller (rev 31)
02:00.0 USB controller: ASMedia Technology Inc. ASM1142 USB 3.1 Host Controller
03:00.0 PCI bridge: ASMedia Technology Inc. ASM1083/1085 PCIe to PCI Bridge (rev 04)
This controller can be disabled with the following command.

$ echo -n "0000:02:00.0" | sudo tee /sys/bus/pci/drivers/xhci_hcd/unbind
Here is a Linux hack to ignore the misbehaving ASM1142 USB 3.0 controller on bootup.

$ cat /etc/rc.local
#!/bin/bash

# "Fix" "2:00.0 USB controller: ASMedia Technology Inc. ASM1142 USB 3.1 Host Controller"
echo -n "0000:02:00.0" | sudo tee -a /sys/bus/pci/drivers/xhci_hcd/unbind

exit 0
This made the system pretty usable again. Victory!?

🦑Be Ethical, Use it for learning purposes !!!

Ref: Hacking Notes
@UndercodeCommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

#iPhone 17 Pro Rumored to Feature Horizontal Camera Bar

https://undercodenews.com/iphone-17-pro-rumored-to-feature-horizontal-camera-bar/

@Undercode_News

⚡️ Gamaredon Expands Arsenal: New #Android #Spyware Emerges

https://undercodenews.com/gamaredon-expands-arsenal-new-android-spyware-emerges/

@Undercode_News

SmartThings Music Sync Expands: Now Supports #YouTube Music

https://undercodenews.com/smartthings-music-sync-expands-now-supports-youtube-music/

@Undercode_News

⚡️ #Apple's AirTag: A Traveler's New Best Friend

https://undercodenews.com/apples-airtag-a-travelers-new-best-friend/

@Undercode_News

🚨 Major Security Breach: Chinese Hacker Exploited Sophos Firewall Vulnerability, US Issues 0 Million Reward

https://undercodenews.com/major-security-breach-chinese-hacker-exploited-sophos-firewall-vulnerability-us-issues-0-million-reward/

@Undercode_News

🦑LeakedDBParser :

A tool to parse leaked databases in CSV-like or SQL format.

>> LeakedDBParser

git clone https://github.com/hegusung/LeakedDBParser.git
./leakeddbparser.py <hashfile> [-o <output_file>] [-n max_lines] {csv|sql} [csv or sql options]

>> CSV Format Options

1️⃣. -c: Select columns and apply checks.
- Syntax: -c <column_number>,<condition>
- Example:

     -c 1,2=40,?3
     

- Includes columns 1 and 2 in the output if:
- Column 2 has a length of 40.
- Column 3 exists.

2️⃣. --no-header: Ignore the first line of the CSV file.

>> SQL Format Options

3️⃣. --list-tables: List the tables and their columns in the SQL dump.
- Example:

     ./leakeddbparser.py sqldump.sql sql --list-tables
     

4️⃣. --dump <table_name>: Export a specific table.
- Can use -c to select specific columns.

5️⃣. Column Selection (-c):
- Syntax: -c <column_numbers>
- Example:

     ./leakeddbparser.py sqldump.sql -o export_user_hash.txt sql --dump users -c 3,5
     

- Exports columns 3 and 5 from the users table to the file export_user_hash.txt.

@UndercodeCommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

#Digital IDs in Your Wallet: A State-by-State Guide

https://undercodenews.com/digital-ids-in-your-wallet-a-state-by-state-guide/

@Undercode_News

🦑10 Cybersecurity Marketing Strategies To Grow Your Business:

1. Create A Product-Led SEO & Content Marketing Strategy

2. Get Targeted Media Coverage With Strategic PR

3. Build Authority With Anonymous Case Studies

4. Invest In PPC Campaigns For Faster Growth

5. Build Your Tribe With Email Marketing

6. Secure Your Cybersecurity Firm’s Online Reputation

7. Generate Social Proof On Review Aggregator Sites

8. Grow Your Social Media Influence

9. Drive Traffic From Reddit & Quora

10. Start A Podcast To Offer In-depth Advice

Ref: Chris Greer
@UndercodeCommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

⚡️ Cultivating a Hacker Mindset: A New Cybersecurity Defense

https://undercodenews.com/cultivating-a-hacker-mindset-a-new-cybersecurity-defense/

@Undercode_News

🖥️ Chinese Surveillance Tool, EagleMsgSpy, Spying on Mobile Devices

https://undercodenews.com/chinese-surveillance-tool-eaglemsgspy-spying-on-mobile-devices/

@Undercode_News

🦑"If you place a simple app into public cloud, what would you need to do to make sure everything is secured?"

I am getting a lot of different answers. Some recall authentication and authorization.

Some are talking about Web Firewall.

Some give me much more detail on network segmentation.

All this is great, but I missed somehow a holistic picture of this security aspects in Solution Design.

As you know, a picture worth a thousand words, so I put all things together into one generic picture.

There are a lot more nuances, for sure, but I think this diagram could be a good starting point in understanding a security.

Ref: Dmitrijs Lebedevs
@UndercodeCommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

Global Takedown Disrupts DDoS-for-Hire Market in Holiday Crackdown

https://undercodenews.com/global-takedown-disrupts-ddos-for-hire-market-in-holiday-crackdown/

@Undercode_News

⚡️ Time Inc's #AI Chatbot: A New Interactive Journalism

https://undercodenews.com/time-incs-ai-chatbot-a-new-interactive-journalism/

@Undercode_News

🛡️ Anduril's Ambitious Push into the Future of Defense

https://undercodenews.com/andurils-ambitious-push-into-the-future-of-defense/

@Undercode_News

Electric Air Taxis Soaring to Japan

https://undercodenews.com/electric-air-taxis-soaring-to-japan/

@Undercode_News

Time Jumps into the Future with #OpenAI Partnership

https://undercodenews.com/time-jumps-into-the-future-with-openai-partnership/

@Undercode_News

🔴 rahman SelectCours 10 Template Injection (#CVE-2024-2064) - Critical

https://dailycve.com/rahman-selectcours-10-template-injection-cve-2024-2064-critical/

@Daily_CVE