Hacker News: ropbear

Learning-focused CTFs are Facing a Restructure

ropbear — Mon, 18 May 2026 11:44:53 +0000

Article URL: https://exploiting.systems/posts/2026-05-17-learning-focused-ctfs-are-facing-a-restructure

Comments URL: https://news.ycombinator.com/item?id=48178311

Points: 1

# Comments: 0

Learning-focused CTFs are Facing a Restructure

ropbear — Sun, 17 May 2026 12:45:46 +0000

Article URL: https://exploiting.systems/posts/2026-05-17-learning-focused-ctfs-are-facing-a-restructure

Comments URL: https://news.ycombinator.com/item?id=48168434

Points: 3

# Comments: 1

The Changing Landscape of CTF-Based Learning

ropbear — Sat, 16 May 2026 13:51:38 +0000

Article URL: https://exploiting.systems/posts/2026-05-15-the-changing-landscape-of-ctf-based-learning

Comments URL: https://news.ycombinator.com/item?id=48160278

Points: 2

# Comments: 0

New comment by ropbear in "Codex Hacked a Samsung TV"

ropbear — Thu, 16 Apr 2026 13:47:15 +0000

Made a comment up above, but that's tdpServer and tmpServer (sometimes tdpd and tmpd) and it's what I use in my python implementation of tmpcli, the (somewhat broken) client binary on some TP-Link devices.

You're correct, it gives you access to everything the Tether app can do.

https://github.com/ropbear/tmpcli

New comment by ropbear in "Codex Hacked a Samsung TV"

ropbear — Thu, 16 Apr 2026 13:42:45 +0000

Of course! Happy to contribute. As is the case with your device, there's a lot of weird TP-Link firmware variants (even an RTOS called TPOS based on VxWorks), so no guarantee it'll work all the time. Glad there's more research being done in the space!

New comment by ropbear in "Codex Hacked a Samsung TV"

ropbear — Thu, 16 Apr 2026 12:31:17 +0000

Many eons ago I wrote a Python version of tmpcli for this exact reason. Made some minor improvements a few years ago but haven’t touched it since. Curious what methodology Codex came up with, I haven’t revisited it since models got really good.

The idea is that tmpServer listens on localhost, but dropbear allows port forwarding with admin creds (you’ll need to specify -N). That program has full device access and is the API the Tether app primarily uses to interact with the device.

https://github.com/ropbear/tmpcli

Show HN: Ophishal v0.1.0, a Red Team CLI Phishing Framework

ropbear — Fri, 22 Aug 2025 02:00:33 +0000

Putting a beta out there. This uses OpenAI's models to generate phishing emails, but with enough flexibility to simply use a JSON config and Jinja2 templates.

Don't really have the time to maintain it properly but hopefully someone finds it interesting, inspiring, or best case useful for their red team.

Comments URL: https://news.ycombinator.com/item?id=44980310

Points: 1

# Comments: 0