This article discloses critical vulnerabilities in IPTV/H.264/H.265 video encoders based on HiSilicon hi3520d hardware. The vulnerabilities exist in vendor application software running on these devices. All vulnerabilities are exploitable remotely and can lead to sensitive information exposure, denial of service, and remote code execution resulting in full takeover of the device. With multiple…
Ten days ago, I’ve made my first attempt at OSWE certification , and today I received the official confirmation: I passed!!! Here is my review of the course and the exam. AWAE course I’ve bought 30 days of AWAE lab access and scheduled it to start on March 15. With ~4 years in web application hacking, plus several years prior to that in application security in general, plus past experience as a…
During a recent pentest, I needed to test an iOS app. Since the app was not in the App Store yet, it was given to me in the form of an .ipa file. I had to figure out a way to load it to my test iPhone. Apparently, there are several instructions on the Internet on how to do that, but I couldn’t find the one that worked for me out of the box, so here is my own… Given An iOS app distributed as an IPA…
“You’re one of 772,904,991 people pwned in the Collection #1 data breach” … Many of us have received an email with this subject line from Troy Hunt’s Have I Been Pwned service about 3 weeks ago. By design, that service doesn’t tell you exactly which account(s) or password(s) of yours have been pwned, you’ll need to find out yourself. I keep most of my passwords in LastPass and I was wondering…
Insecure deserialization was recently added to OWASP’s list of the top 10 most critical web application security risks , yet it is by no means a new vulnerability category. For years, data serialization and deserialization have been used in applications, services and frameworks, with many programming languages supporting them natively. Deserialization got more attention recently as a potential…
One of my favorite things to do around Christmas is to participate in SANS Holiday Hack Challenges . These challenges are a fun way to learn and practice hacking skills. They are released once a year around Christmas and cover a broad range of technologies, tools and hacking techniques. Aside from the high quality of the exercises in an extremely gamified environment, these challenges are: 1)…
Apache Struts and Equifax: real life consequences 9/14/2017 Update: The Apache Struts vulnerability discussed in this blog was found to be the flaw that led to the Equifax data breach. While hacking games are fun, it’s a reminder that legitimate applications have these vulnerabilities, with real-life consequences and extremely high stakes. For more details on the Apache Struts vulnerability and a…
I published an article on IBM developerWorks . Yippee!!!