From our lab.
Research, write-ups and tooling from our day-to-day testing work.
BlueStacks 5 & Android penetration testing
BlueStacks is a great alternative to Genymotion and Android Studio. How to configure BlueStacks 5 for Android testing — rooting the device, installing root certificates and installing Frida.
Read post ResearchCircumventing GARP on Cisco IP phones
Studying Cisco IP phones on their own VLAN: how integrated security controls could be bypassed to intercept private calls, plus other observations that directly affected device security.
Read post ToolAutomated Burp authorisation testing
Authbreaker, a Jython-based Burp plugin we developed to test for authorisation issues in web applications and APIs.
Read postForcing MiTM via saved wireless networks
Research into attacking unconnected wireless devices, such as mobile handsets, via malicious networks — leading to a MiTM attack without any end-user interaction.
// paper coming soonWant this kind of thinking on your systems?
Get an instant estimate, or book a free consultation.