Company
About us
SRLabs is a hacking think tank in Berlin, working since 2010. More than fifty security researchers, hackers and software engineers work here, in Berlin and Hong Kong.
What we do
We test systems and we publish what we find. The consulting pays for the research. The research is where the methods come from.
Clients are in telecoms, finance, government, automotive, hardware, utilities and web, in 21 countries. The mobile networks we have tested serve more than 400 million subscribers.
Research
The work has run since 2010 and it moves with the systems people actually deploy. Cryptography and RFID came first, then mobile networks, then payment and enterprise IT, and more recently blockchain runtimes, AI deployments and cloud. Some of it stopped being interesting once it was fixed. Some of it we are still on fifteen years later.
A few landmarks rather than a list: the A5/1 cracker, Mifare and Legic Prime, GSM and 3G interception, SIM card attacks, SS7 abuse, point-of-sale terminals, BadUSB, the Android patch gap, the Ethereum patch gap, EDR evasion, 5G RAN and Qualcomm basebands. BadUSB is probably the best known: it showed that the controller firmware in an ordinary USB device can be reprogrammed to impersonate another device, and that reinstalling the operating system does not remove it.
The tools are published with the write-ups: SIMtester, gsmmap, SnoopSnitch, CosmFuzz, Certiception, a Hexagon baseband fuzzing toolchain, and a decryptor for the Black Basta ransomware.
All of it is on the blog: 61 write-ups, the oldest from 2010.
People
Wolf Richter
CEO
Twenty years in strategy consulting before this. He founded McKinsey’s cyber security practice and led it.
Karsten Nohl
Founder
Founded SRLabs and led it as CEO. He is now Chief Innovation Officer at Allurity, the group SRLabs is part of.
Visit Us
Berlin
Office in Ostkreuz
Hong Kong
Office in Sheung Wan
Secure Together.
We are part of Allurity
Allurity is the preferred partner for tech-enabled cybersecurity services in Europe. Our trusted family is comprised of best-in-class companies. With our collective strength, we pursue the mission to enable a safe digital world by:
- Offering the full spectrum of cybersecurity services
- Improving data protection, cyber resilience and reliability
- Reducing the high societal costs of cybercrime
Companies across Europe
12
Offices in 18 Countries
42
Best-in-class experts
780
Million identities protected
16,2