Collaborate Disseminate
I have some issues with this CVE. Firstly, I can see that there is some permission issue in TelephonyProvider.java which causes some information disclosure.
I have tried to use frida exploit this CVE, however, I cannot find the TelephonyP… Continue reading How to exploit CVE-2020-0035 in android
I know the methods for running possible malicious programs safely but how do i keep my computer secure when i need to use a tool that might be malware from can not run it in a sandbox or virtual machine since it requires access to hardware… Continue reading How to run hardware dependent programs safely
How does malware use the Tor network to keep hidden services safe from takedowns
If I need to make get request to an html page and thus pass a secret via the url using https, is it true that I’d need to pass it in a query string versus a part of a path url?
my_domain.com/some_url/my_secret123 –> bad
… Continue reading Passing a secret in url: as a part of the url or query string?
I came across this tool recently https://github.com/drk1wi/portspoof
How efficient will it be to use it to confuse hackers doing port scanning? If it’s actually going to be pretty efficient, why hasn’t it caught up so far?… Continue reading How wise is it to use a tool for portspoofing at your server to confuse attackers?