How I managed to hack the accounts of arbitrary users of a yahoo! application in only 30 minutes.Continue reading on Medium » (https://retr02332.medium.com/csrf-leads-to-account-takeover-in-yahoo-958321990740?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
CSRF leads to account takeover in Yahoo!
How I managed to hack the accounts of arbitrary users of a yahoo! application in only 30 minutes.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Save over $1,000 on your groceries with 1 line of code
https://cdn-images-1.medium.com/max/911/1*crBEZB_3wdVvGo8IEKXQ8Q.png
Rewards programs (AKA Loyalty Programs) are a fascinating, yet simple concept.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Save over $1,000 on your groceries with 1 line of code
https://cdn-images-1.medium.com/max/911/1*crBEZB_3wdVvGo8IEKXQ8Q.png
Rewards programs (AKA Loyalty Programs) are a fascinating, yet simple concept.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Save over $1,000 on your groceries with 1 line of code
Rewards programs (AKA Loyalty Programs) are a fascinating, yet simple concept. Companies will let you sign-up for free with an email, track…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Hacking Idea — Part One
https://cdn-images-1.medium.com/max/600/1*098td-ptnTkS0QtI8u3fqg.jpeg
Do not try to bypass antivirus just try to change your mindset as hacker.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Hacking Idea — Part One
https://cdn-images-1.medium.com/max/600/1*098td-ptnTkS0QtI8u3fqg.jpeg
Do not try to bypass antivirus just try to change your mindset as hacker.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Hacking Idea — Part One
Do not try to bypass antivirus just try to change your mindset as hacker.
CSRF leads to account takeover in Yahoo!
https://retr02332.medium.com/csrf-leads-to-account-takeover-in-yahoo-aa96c678d2aa?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://retr02332.medium.com/csrf-leads-to-account-takeover-in-yahoo-aa96c678d2aa?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
CSRF leads to account takeover in Yahoo!
How I managed to hack the accounts of arbitrary users of a Yahoo! application in only 30 minutes.
How I managed to hack the accounts of arbitrary users of a Yahoo! application in only 30 minutes.Continue reading on Medium » (https://retr02332.medium.com/csrf-leads-to-account-takeover-in-yahoo-aa96c678d2aa?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
CSRF leads to account takeover in Yahoo!
How I managed to hack the accounts of arbitrary users of a Yahoo! application in only 30 minutes.
Aurora Stalls A Sizable DeFi Hack, Pays $6M Bug Bounty through Immunefi
https://smartcontractaudit.medium.com/aurora-stalls-a-sizable-defi-hack-pays-6m-bug-bounty-through-immunefi-a7f4173df3d2?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://smartcontractaudit.medium.com/aurora-stalls-a-sizable-defi-hack-pays-6m-bug-bounty-through-immunefi-a7f4173df3d2?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
Aurora Stalls A Sizable DeFi Hack, Pays $6M Bug Bounty through Immunefi
It could have been the next market-moving DeFi hack, but thanks to bug bounty!
It could have been the next market-moving DeFi hack, but thanks to bug bounty!Continue reading on Medium » (https://smartcontractaudit.medium.com/aurora-stalls-a-sizable-defi-hack-pays-6m-bug-bounty-through-immunefi-a7f4173df3d2?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
Aurora Stalls A Sizable DeFi Hack, Pays $6M Bug Bounty through Immunefi
It could have been the next market-moving DeFi hack, but thanks to bug bounty!
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Cisco Secure Email bug can let attackers bypass authentication
Cisco Secure Email bug can let attackers bypass authenticationPost Views: 1
Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon-3.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes
Cisco notified customers this week to patch a critical vulnerability that could allow attackers to bypass authentication and login into the web management interface of Cisco email gateway appliances with non-default configurations.
The security flaw (tracked as CVE-2022-20798) was found in the external authentication functionality of virtual and hardware Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager appliances.
CVE-2022-20798 is due to improper authentication checks on affected devices using Lightweight Directory Access Protocol (LDAP) for external authentication.
“An attacker could exploit this vulnerability by entering a specific input on the login page of the affected device,” Cisco explained.
“A successful exploit could allow the attacker to gain unauthorized access to the web-based management interface of the affected device.”
An advisory published on Wednesday says the bug was discovered during the resolution of a Cisco TAC (Technical Assistance Center) support case.
Cisco’s Product Security Incident Response Team (PSIRT) said it’s not aware of any publicly available exploits for this security bug or malicious use of the vulnerability in the wild.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png Doesn’t affect default configurationsThis bug only affects appliances configured to use external authentication and LDAP as the authentication protocol.
Luckily, according to Cisco, the external authentication feature is disabled by default, meaning only devices with non-default configurations are impacted.
To check if external auth is enabled on your appliance, log into the web-based management interface, go to System Administration > Users, and look for a green check box next to “Enable External Authentication.”
See Also: This new Linux malware is ‘almost impossible’ to detect Cisco also says this vulnerability does not affect its Cisco Secure Web Appliance product, previously known as Cisco Web Security Appliance (WSA).
Admins who cannot immediately install CVE-2022-20798 security updates can also apply a workaround that requires disabling anonymous binds on the external authentication server.
Another Secure Email gateway flaw patched in February could allow remote attackers to crash unpatched appliances using maliciously crafted email messages.
See Also: Recon Tool: Domain Analyzer Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Today, Cisco also announced it wouldn’t fix a critical zero-day bug affecting end-of-life RV110W, RV130, RV130W, and RV215W SMB routers, allowing attackers to execute arbitrary commands with root-level privileges.
See Also: The Difference between Vulnerability Assessment and Pentesting
Source: bleepingcomputer.com Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/android-malware-90x90.jpg Android malware on the Google Play Store gets 2 million downloads1 day [...]
___________________________
@hacking_Attack
@Hacking_Video
Cisco Secure Email bug can let attackers bypass authentication
Cisco Secure Email bug can let attackers bypass authenticationPost Views: 1
Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon-3.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes
Cisco notified customers this week to patch a critical vulnerability that could allow attackers to bypass authentication and login into the web management interface of Cisco email gateway appliances with non-default configurations.
The security flaw (tracked as CVE-2022-20798) was found in the external authentication functionality of virtual and hardware Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager appliances.
CVE-2022-20798 is due to improper authentication checks on affected devices using Lightweight Directory Access Protocol (LDAP) for external authentication.
“An attacker could exploit this vulnerability by entering a specific input on the login page of the affected device,” Cisco explained.
“A successful exploit could allow the attacker to gain unauthorized access to the web-based management interface of the affected device.”
An advisory published on Wednesday says the bug was discovered during the resolution of a Cisco TAC (Technical Assistance Center) support case.
Cisco’s Product Security Incident Response Team (PSIRT) said it’s not aware of any publicly available exploits for this security bug or malicious use of the vulnerability in the wild.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png Doesn’t affect default configurationsThis bug only affects appliances configured to use external authentication and LDAP as the authentication protocol.
Luckily, according to Cisco, the external authentication feature is disabled by default, meaning only devices with non-default configurations are impacted.
To check if external auth is enabled on your appliance, log into the web-based management interface, go to System Administration > Users, and look for a green check box next to “Enable External Authentication.”
See Also: This new Linux malware is ‘almost impossible’ to detect Cisco also says this vulnerability does not affect its Cisco Secure Web Appliance product, previously known as Cisco Web Security Appliance (WSA).
Admins who cannot immediately install CVE-2022-20798 security updates can also apply a workaround that requires disabling anonymous binds on the external authentication server.
Another Secure Email gateway flaw patched in February could allow remote attackers to crash unpatched appliances using maliciously crafted email messages.
See Also: Recon Tool: Domain Analyzer Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Today, Cisco also announced it wouldn’t fix a critical zero-day bug affecting end-of-life RV110W, RV130, RV130W, and RV215W SMB routers, allowing attackers to execute arbitrary commands with root-level privileges.
See Also: The Difference between Vulnerability Assessment and Pentesting
Source: bleepingcomputer.com Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/android-malware-90x90.jpg Android malware on the Google Play Store gets 2 million downloads1 day [...]
___________________________
@hacking_Attack
@Hacking_Video
Black Hat Ethical Hacking
Cisco Secure Email bug can let attackers bypass authentication | Black Hat Ethical Hacking
Cisco notified customers this week to patch a critical vulnerability that could allow attackers to bypass authentication and login into the web management interface of Cisco email gateway appliances with non-default configurations.
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking Cisco Secure Email bug can let attackers bypass authentication Cisco Secure Email bug can let attackers bypass authenticationPost Views: 1 Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon…
ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/Linux-90x90.jpg New Linux rootkit, Syslogk uses magic packets to trigger backdoor2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/Header-Python-Packages-Blog-Final-Image-90x90.jpg PyPI package ‘keep’ mistakenly included a password stealer3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/venom_superhero_movie_tom11_hardy-wallpaper-1920x1080-980x551-1-90x90.jpg This new Linux malware is ‘almost impossible’ to detect6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/ran-download-33-1-e1639685560151-90x90.jpeg Black Basta Ransomware Teams Up with Malware Stalwart Qbot7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/InstallerFileTakeOver-Zero-Day-Security-Vulnerability-All-Windows-OS-Versions-90x90.jpg New ‘DogWalk’ Windows zero-day bug gets free unofficial patches1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/ipad_update_1200x675-90x90.jpg Security Fixes Won’t Require Full iOS Update in iOS 16, Will Be Installed Automatically1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/Confluence-90x90.jpg Exploit released for Atlassian Confluence RCE bug, update now1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/be60-article-210907-confluence-body-text-90x90.png Critical Atlassian Confluence zero-day actively used in attacks2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/Microsoft-releases-solutions-for-a-zero-day-vulnerability-90x90.jpg New Windows Search zero-day added to Microsoft protocol nightmare2 weeks ago
The post Cisco Secure Email bug can let attackers bypass authentication first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/Linux-90x90.jpg New Linux rootkit, Syslogk uses magic packets to trigger backdoor2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/Header-Python-Packages-Blog-Final-Image-90x90.jpg PyPI package ‘keep’ mistakenly included a password stealer3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/venom_superhero_movie_tom11_hardy-wallpaper-1920x1080-980x551-1-90x90.jpg This new Linux malware is ‘almost impossible’ to detect6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/ran-download-33-1-e1639685560151-90x90.jpeg Black Basta Ransomware Teams Up with Malware Stalwart Qbot7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/InstallerFileTakeOver-Zero-Day-Security-Vulnerability-All-Windows-OS-Versions-90x90.jpg New ‘DogWalk’ Windows zero-day bug gets free unofficial patches1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/ipad_update_1200x675-90x90.jpg Security Fixes Won’t Require Full iOS Update in iOS 16, Will Be Installed Automatically1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/Confluence-90x90.jpg Exploit released for Atlassian Confluence RCE bug, update now1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/be60-article-210907-confluence-body-text-90x90.png Critical Atlassian Confluence zero-day actively used in attacks2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/Microsoft-releases-solutions-for-a-zero-day-vulnerability-90x90.jpg New Windows Search zero-day added to Microsoft protocol nightmare2 weeks ago
The post Cisco Secure Email bug can let attackers bypass authentication first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
CSRF leads to account takeover in Yahoo!
How I managed to hack the accounts of arbitrary users of a Yahoo! application in only 30 minutes.Continue reading on Medium »
Read more...
How I managed to hack the accounts of arbitrary users of a Yahoo! application in only 30 minutes.Continue reading on Medium »
Read more...
Dark Reading: Attacks/Breaches
How Should I Think About Security When Considering Digital Transformation Projects?
Digital transformation helps businesses keep operating and to stay competitive. Here are the ways to think about security so that businesses reap the benefits without taking on associated risks.
How Should I Think About Security When Considering Digital Transformation Projects?
Digital transformation helps businesses keep operating and to stay competitive. Here are the ways to think about security so that businesses reap the benefits without taking on associated risks.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
What is XML external entity injection?
https://cdn-images-1.medium.com/max/638/0*8VPnaHAvq_zlq1xK
ในส่วนนี้ เราจะอธิบายว่า XML external entity injection คืออะไร ใช้ประโยชน์จากการ XXE injection ประเภทโจมตีต่างๆ…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
What is XML external entity injection?
https://cdn-images-1.medium.com/max/638/0*8VPnaHAvq_zlq1xK
ในส่วนนี้ เราจะอธิบายว่า XML external entity injection คืออะไร ใช้ประโยชน์จากการ XXE injection ประเภทโจมตีต่างๆ…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
What is XML external entity injection? 🤨
ในส่วนนี้ เราจะอธิบายว่า XML external entity injection คืออะไร ใช้ประโยชน์จากการ XXE injection ประเภทโจมตีต่างๆ…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Offensive Security Tool: Mobile Security Framework (MobSF)
Offensive Security Tool: Mobile Security Framework (MobSF)Post Views: 4
Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 4 Minutes GitHub Link Mobile Security Framework (MobSF)Performing Pentesting on Mobile Application by the Red Team means you are dealing with either APK (Android), IPA (IOS), or EXE (Windows), you need to have a vast knowledge of how you can perform not only automated tests and attacks but also Dynamic, which requires a special setup and specific tools, with special knowledge on how you can look under the hood within the source code itself, trying to find various range of vulnerabilities.
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. MobSF supports mobile app binaries (APK, XAPK, IPA & APPX) along with zipped source code and provides REST APIs for seamless integration with your CI/CD or DevSecOps pipeline. The Dynamic Analyzer helps you to perform runtime security assessment and interactive instrumented testing.
See Also: OSINT Tool: Metabigor Documentation* Try MobSF Static Analyzer Online: mobsf.live
* MobSF in CI/CD: mobsfscan
* Conference Presentations: Slides & Videos
* What’s New: See Changelog Static Analysis – Androidhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/Static-Analysis-Android.png Static Analysis – Android Source Tree-viewhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/Static-Analysis-Android-Source-Tree-view.png Static Analysis – iOShttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/Static-Analysis-iOS.png Dynamic Analysis – Android APKhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/Dynamic-Analysis-Android-APK.png Web API Viewerhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/Web-API-Viewer.png See Also: The Difference between Vulnerability Assessment and Pentesting https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/metabigor-90x90.png OSINT Tool: Metabigor6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/Domain-Analyzer-90x90.png Recon Tool: Domain Analyzer2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/deepsleep-90x90.png Offensive Security Tool: DeepSleep3 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/qsreplace-90x90.png Recon Tool: qsreplace3 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/Arjun-90x90.png Offensive Security Tool: Arjun4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/Dorks-collections-list-90x90.png Recon Tool: Dorks collections list4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/malicious-pdf-90x90.png Offensive Security Tool: malicious-pdf1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/scanmycode-90x90.png Static Code Analysis Tool: scanmycode-ce1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/MOSINT-1-90x90.png OSINT Tool: MOSINT2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/findomain-90x90.png Recon Tool: Findomain2 months ago
The post Offensive Security Tool: Mobile Security Framework (MobSF) first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
Offensive Security Tool: Mobile Security Framework (MobSF)
Offensive Security Tool: Mobile Security Framework (MobSF)Post Views: 4
Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 4 Minutes GitHub Link Mobile Security Framework (MobSF)Performing Pentesting on Mobile Application by the Red Team means you are dealing with either APK (Android), IPA (IOS), or EXE (Windows), you need to have a vast knowledge of how you can perform not only automated tests and attacks but also Dynamic, which requires a special setup and specific tools, with special knowledge on how you can look under the hood within the source code itself, trying to find various range of vulnerabilities.
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. MobSF supports mobile app binaries (APK, XAPK, IPA & APPX) along with zipped source code and provides REST APIs for seamless integration with your CI/CD or DevSecOps pipeline. The Dynamic Analyzer helps you to perform runtime security assessment and interactive instrumented testing.
See Also: OSINT Tool: Metabigor Documentation* Try MobSF Static Analyzer Online: mobsf.live
* MobSF in CI/CD: mobsfscan
* Conference Presentations: Slides & Videos
* What’s New: See Changelog Static Analysis – Androidhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/Static-Analysis-Android.png Static Analysis – Android Source Tree-viewhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/Static-Analysis-Android-Source-Tree-view.png Static Analysis – iOShttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/Static-Analysis-iOS.png Dynamic Analysis – Android APKhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/Dynamic-Analysis-Android-APK.png Web API Viewerhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/Web-API-Viewer.png See Also: The Difference between Vulnerability Assessment and Pentesting https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/metabigor-90x90.png OSINT Tool: Metabigor6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/Domain-Analyzer-90x90.png Recon Tool: Domain Analyzer2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/deepsleep-90x90.png Offensive Security Tool: DeepSleep3 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/qsreplace-90x90.png Recon Tool: qsreplace3 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/Arjun-90x90.png Offensive Security Tool: Arjun4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/Dorks-collections-list-90x90.png Recon Tool: Dorks collections list4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/malicious-pdf-90x90.png Offensive Security Tool: malicious-pdf1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/scanmycode-90x90.png Static Code Analysis Tool: scanmycode-ce1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/MOSINT-1-90x90.png OSINT Tool: MOSINT2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/findomain-90x90.png Recon Tool: Findomain2 months ago
The post Offensive Security Tool: Mobile Security Framework (MobSF) first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
Black Hat Ethical Hacking
Offensive Security Tool: Mobile Security Framework (MobSF) | Black Hat Ethical Hacking
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.