In this episode of Hacker Talk, we are joined byLucas Lundgren, is an impressive penetration tester, security researcher, and our Hacker of honor today.Lucas is known for going out on the internet and finding interesting internet-facing protocols, he has found several internet-facing critical infrastructures, prison door systems, medical x-ray file storage servers(Pacs), earthquake systems, and a lot more! In this episode we cover the following topics: Journey into hacking, radio, commodore64, Amiga 500, cracking gamesTime bomb viruses for Amiga 500 gamesFinding vulnerabilities, getting invited to conferences to speak at 13War dialing Amiga 500, phone phreaking with modernLearning lock picking building your own port scannerScanning the entire internet with Masscan from home with a 10gigabit connection Parsing scan results with elastic search, grep, kibanaMqtt - embedded protocol, finding and opening prison doors with MQTT, Malware with MQTT brokersOpening and closing doors in prisons in the UKAtm's with MQTTChanging oil pipelines pressure withFinding protocols to scan the internet for iscsiHacking x-ray machinesFinding hospitals x-ray records in Pax servers  dating back to 1985Problems with hospitals' x-ray storage servers Reporting security vulnerabilitiesEditing x-ray pictures, Malware that adds black spots on the pictures and reuploads it.Malware in metadata of the x-ray pictures X-ray malware in the wildImage recognition Making fictional earthquakesRemote code execution on doorbellsHack-rf, software-defined radioWardrivingHacking radioIridiumWeather satellites Hacking satellites Breaking into a gas pump with wooden strawsPhysical penetration testingLinks: https://github.com/robertdavidgraham/masscan https://en.wikipedia.org/wiki/MQTThttps://www.elastic.co/kibanahttps://en.wikipedia.org/wiki/Picture_archiving_and_communication_system https://www.youtube.com/watch?v=o7qDVZr0t2chttps://en.wikipedia.org/wiki/Barnaby_Jackhttps://www.iridium.com/https://hack.cysat.eu/Skullkeysecurity.com https://twitter.com/Acidgen Hosted on Acast. See acast.com/privacy for more information.