Unlocking SIM Cards with a Logic Analyzer

[Jason Gin] wanted to reuse the SIM card that came with a ZTE WF721 wireless terminal he got from AT&T, but as he expected, it was locked to the device. Unfortunately, the terminal has no function to change the PIN and none of the defaults he tried seemed to work. …read more

Continue reading Unlocking SIM Cards with a Logic Analyzer

How to sniff direct websocket connection in android ( i.e. no HTTP Upgrade connections ) using BURP?

I’ve pentested a lot of websites and a few apps too but this app eludes them all.
On the websites, when there’s a websocket upgrade the BURP proxy recognizes it and starts showing it in the websockets tab. Somewhat similar happens on the a… Continue reading How to sniff direct websocket connection in android ( i.e. no HTTP Upgrade connections ) using BURP?

Is there a reason why ARP spoofing would be used for spying instead of sniffing promiscuously?

I am a student trying to demonstrate an ARP spoofing attack. To test whether my attack was working I decided to use wireshark to sniff the packets on the attacking machine. At first I thought I was able to intercept traffic with my ARP spo… Continue reading Is there a reason why ARP spoofing would be used for spying instead of sniffing promiscuously?