Recent News
Brida: Advanced Mobile Application Penetration Testing with Frida
Introduction Brida is a Burp Suite Extension that, working as a bridge between Burp Suite…
Universal Android SSL Pinning bypass with Frida
Android SSL Re-Pinning Two kinds of SSL Pinning implementations can be found in Android apps:…
Reliable discovery and exploitation of Java deserialization vulnerabilities
Introduction Java deserialization vulnerabilities were discovered and disclosed in January 2015 by Gabriel Lawrence and Chris…
Fiddler: NTLM authentication when Burp Suite fails
Recently, we tested a Web application with NTLM authentication. The authentication works correctly with any browser,…
CVE-2016-8919 – IBM WebSphere deserialization of untrusted data
IBM WebSphere deserialization of untrusted data: http://lab.mediaservice.net/advisory/2016-03-websphere.txt [crayon-599e7a57c140d505879105/]
CVE-2016-7065 – Red Hat JBoss EAP deserialization of untrusted data
Red Hat JBoss EAP deserialization of untrusted data Advisory URL: http://lab.mediaservice.net/advisory/2016-05-jboss.txt [crayon-599e7a57c17d4368577596/]
Exploiting OGNL Injection
Recently during a penetration test Burp Suite reported a “Expression Language Injection” issue. Burp Suite…