A blog showcasing broken security mechanisms and vulnerabilities ranging from IoT bootloader protection all the way to physical pen-testing
Intro As the entire world races torwards connectivity, time-to-market is often prioritized over security. In today’s episode - finding vulnerabilities in smart car appliences! If you recognize one of the logos in the picture above, you might be at risk! Improper authorization may lead to unauthorized access to smart car appliences (dash cams, car infotainment systems), granting access to locat...
Prologue It all started when I got fed up with the typical Linux process injection PoCs that relied on either ptrace() or LD_PRELOAD. I wanted something different, something a bit more intriguing—a more generic way to inject arbitrary code by using a malicious shared object library. I realized that the procfs memory-related entries with r/w permissions left an open door to quite literally pwn a...
As security researchers, we are often required to think creatively in order to think of edge cases and find vulnerabilities. Creativity is commonly referred to as the attribute of ‘non-systematical’ thinking, ‘non-analytical’ thinking, or in other words - thinking outside the box. So much so that creative thinking is many times perceived as the complete opposite of critical thinking. So, if I ...
Imagine you have received a WhatsApp message with a link to ln.instagram.com. Where do you think the link leads? Instagram? Think again. I have found a phishing vulnerability in WhatsApp that enables the best phishing attacks possible. An attacker can send anyone a crafted message with a link that appears to lead to a legitimate website, but in fact leads to any website of the attacker’s choi...
There is a saying that you don’t truly own a router until you flash your own firmware on it. The only problem was that the bootloader of my router was password protected. So I accepted the challenge :) Disclaimer - My ISP is the biggest one in Israel, and this is their newest router. They market it as “BCyber” (spoiler alert - not much cyber ahead) Opening up the router, I found 4 pins th...