NEW BOT Телеграм, страница

Android Smartphone manufacturer #OnePlus launches an official 'Bug Bounty Program' with rewards up to $7000 for reporting security vulnerabilities.

security.oneplus.com/index.html

Special cases: up to $7,000
Critical: $750 - $1,500
High: $250 - $750
Medium: $100 - $250
Low: $50 - $100

270 views23:41

Android Security & Malware

Forwarded from The Bug Bounty Hunter

Apple Security Bounty
https://developer.apple.com/security-bounty/

Bounty - Apple Security Research

Your security research may be eligible for a reward through the Apple Security Bounty. We welcome reports from anyone.

268 views10:43

Android Security & Malware

Android Root Detection Bypass By Manual Code Manipulation (repacking)
https://medium.com/@sarang6489/root-detection-bypass-by-manual-code-manipulation-5478858f4ad1

Medium

Root Detection Bypass By Manual Code Manipulation.

Root Detection Bypass Manually

3.33K views10:53

Android Security & Malware

Apple Platform Security (Fall 2019)
https://manuals.info.apple.com/MANUALS/1000/MA1902/en_US/apple-platform-security-guide.pdf

Apple Support

Manuals, Specs, and Downloads - Apple Support

Manuals, technical specifications, downloads, and more for Apple software and hardware

3.18K views11:13

Android Security & Malware

BFU Extraction: Forensic Analysis of Locked and Disabled iPhones
https://blog.elcomsoft.com/2019/12/bfu-extraction-forensic-analysis-of-locked-and-disabled-iphones/

ElcomSoft blog

BFU Extraction: Forensic Analysis of Locked and Disabled iPhones

We have recently updated Elcomsoft iOS Forensic Toolkit, adding the ability to acquire the file system from a wide range of iOS devices. The supported devices include models ranging from the iPhone 5s through the iPhone X regardless of the iOS version; more…

3.61K views11:32

Android Security & Malware

Forwarded from The Bug Bounty Hunter

Full Account Takeover (Android Application)
https://medium.com/@vbharad/full-account-takeover-android-application-78fa922f78c5

Medium

Full Account Takeover (Android Application)

Introduction :

299 views14:18

Android Security & Malware

Forwarded from The Bug Bounty Hunter

Android Root Detection Bypass Using Objection and Frida Scripts
https://medium.com/@GowthamR1/android-root-detection-bypass-using-objection-and-frida-noscripts-d681d30659a7

Medium

Android Root Detection Bypass Using Objection and Frida Scripts

This article is a follow up to the previous article. If you guys haven’t checked it out, feel free to visit it.

👍1

284 views14:41

Android Security & Malware

Analysis of ToTok iOS application from App Store
-checkra1n
-iProxy
-Frida
https://objective-see.com/blog/blog_0x52.html

objective-see.org

Mass Surveillance, is an (un)Complicated Business

triaging a massively popular iOS application, with a dark side

3.24K views07:01

Android Security & Malware

Android Malware Scoring System
An Obfuscation-Neglect Android Malware Scoring System
https://github.com/quark-engine/quark-engine

GitHub

GitHub - ev-flow/quark-engine: Quark Agent - Your AI-powered Android APK Analyst

Quark Agent - Your AI-powered Android APK Analyst. Contribute to ev-flow/quark-engine development by creating an account on GitHub.

3.42K views12:25

Android Security & Malware

Checkra1n Era - Ep 5 - Automating extraction and processing
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-5-automating.html

blog.digital-forensics.it

Checkra1n Era - Ep 5 - Automating extraction and processing (aka "Merry Xmas!")

DFIR research

3.19K views16:45

Android Security & Malware

Total mobile surveillance
Your smartphone can broadcast your exact location thousands of times per day, through hundreds of apps, instantaneously to dozens of different companies. Each of those companies has the power to follow individual mobile phones wherever they go, in near-real time.
https://www.nytimes.com/interactive/2019/12/21/opinion/location-data-privacy-rights.html

Nytimes

Opinion | Total Surveillance Is Not What America Signed Up For (Published 2019)

Congress should take bold action to regulate the location data industry.

3.33K views09:48

Android Security & Malware

3 Steps to Protect Your Phone

1. Stop sharing your location with apps
2. Disable your mobile ad ID
3. Prevent Google from storing your location
https://www.nytimes.com/interactive/2019/12/19/opinion/location-tracking-privacy-tips.html

Nytimes

Opinion | Freaked Out? 3 Steps to Protect Your Phone (Published 2019)

Tips to prevent your location from being bought and sold.

3.84K viewsedited 09:53

Android Security & Malware

100 Android AdFraud apps found on Google Play
https://www.whiteops.com/blog/bringing-starchild-down-to-earth-soraka-sdk

HUMAN

Bringing Starchild Down to Earth: Soraka SDK

The White Ops Threat Intelligence team found 100+ malicious apps under the Soraka code package.

4.24K views00:03

Android Security & Malware

A security researcher said he has matched 17 million phone numbers to Twitter user accounts by exploiting a flaw in Twitter’s Android app
https://techcrunch.com/2019/12/24/twitter-android-bug-phone-numbers/

TechCrunch

A Twitter app bug was used to match 17 million phone numbers to user accounts

The researcher matched 17 million phone numbers using the Android app's contact upload feature.

3.83K views09:13

Android Security & Malware

Hunting Credentials and Secrets in iOS Apps #pentest #bugbounty
https://spaceraccoon.dev/low-hanging-apples-hunting-credentials-and-secrets-in-ios-apps

spaceraccoon.dev

Low-Hanging Apples: Hunting Credentials and Secrets in iOS Apps

Diving straight into reverse-engineering iOS apps can be daunting and time-consuming. While wading into the binary can pay off greatly in the long run, it’s also useful to start off with the easy wins, especially when you have limited time and resources.…

9.17K views20:53

Android Security & Malware

KTRW: The journey to build a debuggable iPhone
https://media.ccc.de/v/36c3-10806-ktrw_the_journey_to_build_a_debuggable_iphone