Introduction of Tcache bins in Heap management
The purpose of this blog post is to understand the implementation of Tcache bins from the perspective of exploit development, and intended for the people who already have some basic…
6 Must have tools for your iOS pentesting toolkit
Hello and Welcome everyone!!!! When performing a pentesting either it is web, network, mobile or IoT the essential thing the pentester should have is its tool. So in this blog, I am…
Raspberrypi as poor man’s hardware hacking tool
Introduction I have been wanting to write this blog for quite some time, either I was busy or lazy. I have been asked by so many people on the list of…
“MyMiko” – Responsible Vulnerability Disclosure
Introduction: This is my another case of a vulnerable IoT device. In my previous blogs, we talked about vulnerabilities there was found in Smart lock and beacons. This one is a fun…
“Find – Bluetooth Tracker” Responsible Vulnerability Disclosure – Blog
Introduction: With the advent of IoT, everything is getting connected to the internet. Bluetooth is one such protocol which is used to connect devices to the internet as the most mobile…
Another case of a Vulnerable Smart Lock
I am back with a another blog after a long time. I have been buying lot of random things from aliexpress/banggood and smart locks are one of them. With the…
IoT Security – Part 4 (Bluetooth Low Energy – 101)
Bluetooth Low Energy 101 If you haven’t read through Part 1 to Part 3 of our IoT Security Blog series I would urge you to go through them first unless you…
RedTeaming from Zero to One – Part 2
This is a continuation to the last blog in the series – RedTeaming from Zero to One – Part 1. I strongly recommend everyone who is reading this to first…
RedTeaming from Zero to One – Part 1
Prologue This post is particularly aimed at beginners who want to dive deep into red teaming and move a step ahead from traditional penetration testing. It would also be helpful for…
CloudFuzz: Machine learning powered content specific input generation for fuzzing
CloudFuzz is an integrated software framework for security based fuzzing. The end goal is to provide a workflow that will allow continuous fuzzing and generate reports of the software security…