An easy way to get some features intended for Wahoo Roam v2 using Roam v1 hardware. Of course, there are some features that cannot be added doing a software mod only, for example, the use of multi-band GPS. I even asked chatGPT what would be required to do such a…

Step by step guide how to find and download all wahoo firmware available versions. If you are doing some research, hacking or reversing Wahoo's firmwares (Android based by the way) this might be helpful: Let's imagine you need to find all versions but you only have the following info: https://bolt.wahoofitness.com/boltapp/version.json …

Wahoo devices are popular cycling computers that offers a wide range of features and functionalities for cyclists. One of the unique (and unknown to many) features of the Wahoo devices is the ability to add custom pages in HTML format, . In this article, we’ll show you how to add…

Step by step guide in how to build elemntary What's elemntary? It's a open source software developed in Electron, a framework for building cross-platform desktop applications using web technologies such as HTML, CSS, and JavaScript. What does it do? It allows you to read and modify content and properties of your Wahoo device, which is based…

Step by step on how to solve this Forensics challenge After downloading the zip file and unzipping it, we are left with the following structure: > tree -a -L 2 . ├── bot.js ├── config.json └── .git ├── COMMIT_EDITMSG ├── config ├── description ├── HEAD ├── hooks ├── index ├── info ├── logs ├──…

In this problem we have two files: a zip file with password and an image. Check the challenge here.

Step by step on how to solve this Forensics challenge. To can check it here. We get a pcapng file, which we can open with Wireshark. The clues in the problem tell us that an attacker used the webserver to pivot into the network. Reviewing the data we see that…

How to solve step by step the challenge USB Ripper from the HackTheBox. We download and unzip the file, what we get is: > tree . ├── auth.json └── syslog 0 directories, 2 files Let’s see the content of the files: auth.json

Step by step writeup Link to the challenge. Get the parameters to decrypt the text: Use IDA to get the assembler code and F5 to generate pseudo code. In the challenge.plist file we find the following: bplist00��TflagRidUtitle_XTq+CWzQS0wYzs2rJ+GNrPLP6qekDbwze6fIeRRwBK2WXHOhba7WR2OGNUFKoAvyW7njTCMlQzlwIRdJvaP2iYQ==S123_HackTheBoxIsCool After some trial and error, we infer that the base64 text must be…