logoalt Hacker News

Daniel_Van_Zant • yesterday at 7:53 PM • 7 replies • view on HN

I'm curious has anyone tried hooking up abliterated large language models to systems like this for physical pen-testing? I know there has been lots of hype lately on the capabilities of large language models at finding and exploiting bugs in online software. I know very little about physical pen-testing but would large language models also open up vulnerabilities in the kinds of things this interfaces with or do digital door locks and such have higher levels of security?


Replies

monster_truck • yesterday at 9:03 PM

I think you're overcomplicating things a little bit. A better example of this would be like what I did recently, where I needed to change some non-user-accessible values on a device, could not get ahold of the firmware, and the spec sheets were all behind NDA walls. Instead, I opened it up and read the flash directly, thankfully it was unencrypted, and let deepseek pick it apart and give me a script to fuck with various values including the one I wanted to edit.

Basically like using a gameshark/game genie with extra steps.

app134 • yesterday at 8:55 PM

I pretty thoroughly reverse engineered the unitree Go2 robot dog with a benchtop mobo from a scrapped bot, a USB-TTL convertor, and Opus 4.6

Used the findings to release a jailbreak so you can program the cheap consumer version ($1.6k) as though it were the expensive research version ($15k)

Very fun exercise

https://github.com/a-bissell/UnLeash-Lite

➕ show 1 reply
george_max • yesterday at 10:45 PM

I run a startup, InfiShark Tech, where we sell hardware for physical / wireless pentesting.

A new hardware and software product is in the works which will have this type of functionality, including KVM control + AI computer usage. We're aiming to get a Kickstarter out for it early 2027.

zf00002 • yesterday at 9:37 PM

Kind of similar: https://github.com/jayofelony/pwnagotchi

➕ show 1 reply
devmor • yesterday at 8:27 PM

I don't know about security devices specifically, but I have semi-successfully reverse engineered some abandoned IoT devices by giving DeepSeek and Claude access to a USB flash writer, logic analyzer and power relay for the devices.

I imagine they could be used to do physical pen testing just as easily. From my experience with digital door locks, their level of security is on average, somewhere between a piece of tape and a $5 padlock.

➕ show 1 reply
rootsudo • yesterday at 9:06 PM

great idea, thank you for this

AndrewKemendo • yesterday at 8:04 PM

I have one collecting dust that I stopped using years ago just because I got bored with it so if you wanna work together, I’m happy to. I’d love to see it get more use.

➕ show 1 reply