Latest Blog Posts for H4xOrin' T3h WOrLd

• Wishing You a Happy New Year 2014
  on Dec 31, 2013 in miscellaneous
  ...
• From China, With Love
  on Oct 19, 2013 in cyber crime Exploits Penetration testing Trojans
  Lest anyone think that D-Link is the only vendor who puts backdoors in their products, here’s one that can be exploited with a single UDP packet, courtesy of Tenda.After extracting the latest firmware for Tenda’s W302R wi...
• Burp SessionAuth Extension
  on Jul 17, 2013 in Hacking Tutorial Penetration testing Website hacking
  OverviewNormally a web application should identify a logged in user by data which is stored on the server side in some kind of session storage. However, in web application audits someone can often observe that internal user identifiers are transmi...
• Android Hack-Tool Steals PC Info
  on Jul 9, 2013 in Android iphone
  Over the weekend, Yeh, one of our Security Response Analysts, came across some interesting analysis on a Chinese language forum about an Android app that basically turns a mobile device into a hack-tool capable of stealing information from a conne...
• The most sophisticated Android Trojan
  on Jun 18, 2013 in Android cyber crime Trojans
  Recently, an Android application came to us for analysis. At a glance, we knew this one was special. All strings in the DEX file were encrypted, and the code was obfuscated. The file turned out to be a multi-functional Trojan, capable of the follo...
• Cracking Credit Card Hashes with PowerShell
  on Jun 18, 2013 in Cracking Hacking Tutorial
  As penetration testers, we are frequently engaged to do penetration tests for PCI compliance. As a part of these penetration tests, we look for cardholder data (Card Numbers, CVV, etc.) in files, network traffic, databases, and anywhere else we mi...
• Stupid Little IPv6 Tricks
  on Jun 18, 2013 in ip address tips and tricks
  With the IPv6 Summit on Friday, various IPv6 related topics are of course on my mind. So I figured to put together a quick laundry list of "stupid little IPv6 tricks/topics". Let me know what issues you are running into as well: 1 - Proxies Ri...
• Steps Toward Weaponizing the Android Platform
  on Jun 18, 2013 in Android Exploits Penetration testing
  The mobile and tablet market have been flooded by millions upon millions of Android based devices. I wonder if Ken Thompson or Dennis Ritchie would have ever imagined that their invention from nearly 44 years ago would have influenced the...
• AirCrack-NG Updated after 3-Years
  on Jun 4, 2013 in Cracking hacking tools Tools WiFi
  After a few years, we finally got a release: 1.2 Beta 1. The page length listing of updates include new supported chipsets, fixes for prior chipsets, and just some general clean-up overall covering Airmon-ng, Airmon-zc, Airdecap-ng, Airgraph-ng, A...
• Firmware Hacking: The Samsung smart TV turn
  on May 26, 2013 in backtrack Hacking Tutorial Metasploit Vulnerability
  Today I want to share a little experience I had in reversing Samsung Smat TV's Firmware. I am not going to explain every step in details but I just want to give an idea on how it's possible to perform a reverse engineering process starting from a...

{pvComments::user_name}

{pvComments::date}

Delete 

{pvComments::comment}

Post a Comment