Collaborate Disseminate
I am auditing a embedded device which is connected to my mobile using an application and the communication is done using bluetooth alone, using the android phone’s btsnoop_hci trick i am able to sniff entire bluetooth communi… Continue reading Bluetooth Link key and clear textdata
Was pentesting a Json Rest API today,the API do need a specific header to be sent:- Content-Type: application/json which doesn’t allow to do the trivial CSRF attack so only option i was left with was sending cross domain xhr … Continue reading Ways to bypass browsers CORS Policy
We recently got an API for security audit. The CORS headers of the API seems mis-configured as when we tried requesting the endpoint with http://attacker.com as origin the server returned the following in the response headers… Continue reading How to exploit a misconfigured CPRS policy when a per user authorization token is required?