Collaborate Disseminate
I’ve been tasked to do a black box web app pentest. There are some part of the site that require Flash 11.
I’ve tried with ruffle firefox extension, but it doesn’t seem to support this version. What would you do in this situation? Is there… Continue reading How to pentest an old Flash application?
I’m pentesting an android application written in Cordova and while inspecting the network traffic I found some interesting endpoint that I would like to test.
However, this endpoint need a tokenID (ex. eyJ[…].eyJ[…]) and I don’t know w… Continue reading Requiring Google Mobile Service token
during the static analysis while pentesting an android application I found the following information to connect to a firebase instance.
<string name="google_app_id">1:**REDACTED**:android:**REDACTED**</string>
<str… Continue reading Is it possibile to interact with firebase database using credentials obtained from an APK?
these days i’m interested in learning how metasploitable payloads works deep down.
I’m not new to programming and luckly metasploitable comprehend a lot of interesting payloads with all the relevant source code.
However i’v… Continue reading ASM source code explaination of a general payload such as shell_reverse_tcp.asm