I'm curious has anyone tried hooking up abliterated large language models to systems like this for physical pen-testing? I know there has been lots of hype lately on the capabilities of large language models at finding and exploiting bugs in online software. I know very little about physical pen-testing but would large language models also open up vulnerabilities in the kinds of things this interfaces with or do digital door locks and such have higher levels of security?
I pretty thoroughly reverse engineered the unitree Go2 robot dog with a benchtop mobo from a scrapped bot, a USB-TTL convertor, and Opus 4.6
Used the findings to release a jailbreak so you can program the cheap consumer version ($1.6k) as though it were the expensive research version ($15k)
Very fun exercise
I run a startup, InfiShark Tech, where we sell hardware for physical / wireless pentesting.
A new hardware and software product is in the works which will have this type of functionality, including KVM control + AI computer usage. We're aiming to get a Kickstarter out for it early 2027.
Kind of similar: https://github.com/jayofelony/pwnagotchi
I don't know about security devices specifically, but I have semi-successfully reverse engineered some abandoned IoT devices by giving DeepSeek and Claude access to a USB flash writer, logic analyzer and power relay for the devices.
I imagine they could be used to do physical pen testing just as easily. From my experience with digital door locks, their level of security is on average, somewhere between a piece of tape and a $5 padlock.
great idea, thank you for this
I have one collecting dust that I stopped using years ago just because I got bored with it so if you wanna work together, I’m happy to. I’d love to see it get more use.
I think you're overcomplicating things a little bit. A better example of this would be like what I did recently, where I needed to change some non-user-accessible values on a device, could not get ahold of the firmware, and the spec sheets were all behind NDA walls. Instead, I opened it up and read the flash directly, thankfully it was unencrypted, and let deepseek pick it apart and give me a script to fuck with various values including the one I wanted to edit.
Basically like using a gameshark/game genie with extra steps.