Innovative Vectors & Protocol Analysis
Research is the backbone of Hacking Corporation. Beyond standard assessments, I conduct deep-dive research into protocols and infrastructure.
Case Study: GSM Interception. Developed a fully operational fake Base Transceiver Station (BTS) coupled with a fake Mobile MS (phone), leveraging multiple open source projects. By cracking the A5/1 encryption key in real-time and replaying it on the real network, I demonstrated the ability to intercept requested SMS messages (specifically OTPs), enabling account hijacking of major platforms like Facebook, X and Gmail; the attack was later presented at multiple security conferences.
Case Study: Swiss Transport Ticketing. Reverse-engineered the payment protocol used across Swiss cantons (e.g., Geneva, Vaud, Fribourg): a vulnerability made it possible to purchase tickets for CHF 0. Built a homebrew smart card with custom MCU firmware and hand-soldered electronics, reconstructed the protocol from low-level signal captures on the bench, and produced a PoC as simple as inserting the card and “paying”; findings were presented to Transports Publics Genevois (TPG) and the smart-card provider (IEM Group).
