Security Research

This article was written in collaboration with Omry Zur Intro Capturing SSL (HTTPS) encrypted traffic from an Android app (APK) can be a valuable tool for security researchers. By analyzing this traffic, researchers can identify an app's potential vulnerabilities and security weaknesses. In this article, we will demonstrate, step by step…

I would like to talk about a vulnerability that we discovered in the past. I wanted to repost this nice security research so that it can be on my blog. This product we discovered actually belongs to Turkcell, which serves as a domestic internet infrastructure provider in Turkey. It was…

Hello everyone, This is my first longer write-up about one of my discoveries made while bug hunting. Initial Foothold I was browsing through a website which came to my notice was one of a leading payment system provider in Asia. So, I was checking on this and found that it had a…

Background The past several years had been a golden age for .NET attackers. The ability to run on all Windows versions by design and the stealth in memory code execution ability — made it very popular and widely used in the wild. APT29, Deep Panda, and OilRig are just a few…

If you ask me, the best part of fuzzing closed source targets is the REVERSING and of course checking the crash folder. But sometimes reversing for “the perfect fuzzing target” is a long and frustrating process. Let me share with you the basic steps I follow to better understand and…

Hello to all readers who have come to read this article. This article was produced for SECURI LAB to keep you updated on the latest and relevant security news on Blockchain. Hope this article will be useful to all readers. If there is any error in the article. We apologize…

This is the beginning of my blog documenting my journey in learning about malware development. As one would say — the best way to learn is to teach it to others (in this case — I’ll be writing my notes for the public to see). Portable Executable or PE is a to organize a set of instructions, that can be stored in a disk; so that Windows Operating Systems component called a “loader” can read and load these instructions into memory — which is later then executed by the machine.

简介标题说明了一切 - 在这里，我们将研究编写高质量博客的基本障碍，这是我们业务中的关键，将您的出色研究变成了值得一看的奇观。撰写我们的研究结果的任务…

Disclaimer: This article does not contain any IOCs or infrastructure details. Instead, the aim is to explain the whole business dynamic of a long-lasting malware family. This work is based on almost 10 years of research and intel gatherings and tries its best to stick to the truth and the…