SecureDev
Bypassing Certificate Pinning on Flutter-based Android Apps. A new guide.
One of the preliminary activities when analyzing mobile application, more usually than not, is to be able to sniff HTTP/S traffic via a MitM proxy. This is quite straightforward in the case of naive applications, but can be quite challenging when applications use certificate pinning techniques. In this post I’ll try to explain the methodology […]
Semgrep Rules for iOS Application Security (Swift)
Nowadays, millions of people rely on iOS mobile applications for almost everything. As a result iOS devices manage a significant amount of data including sensitive ones, such as: credentials, health data, payment data and so on. For these reasons ensuring the security of iOS applications is more critical than ever when developing iOS applications. Securely handling sensitive […]
Semgrep Rules for Android Application Security
Introduction The number of Android applications has been growing rapidly in recent years. In 2022, there were over 3.55 million Android apps available in the Google Play Store, furthermore, this number is expected to keep growing in the coming years. The expansion of the Android app market is being driven by a number of factors, […]
A Cool New Project: Semgrep Rules for Android Apps Security
In today’s digital landscape, mobile application security has become an paramount concern. With the increasing number of threats targeting Android applications and the stored personal data, developers and security professionals alike are seeking robust solutions to fortify their code against potential vulnerabilities. That’s why speeding up the time and minimizing the effort in the identification […]
20 years of Software Security
Software security has made significant progress over the past two decades. With the advent of new technologies and a rapidly evolving threat landscape, defending against cyber attacks has become more challenging than ever before. We recently presented on the evolution of threats and defense strategies at the Security Summit in Milan on 15th March 2023. In […]
WorldWide and Threat Modeling
The OWASP Global AppSec Dublin 2023 conference was a truly inspiring event for anyone involved in application security. As an attendee, I was able to catch up with OWASP colleagues and hear from experts on a range of topics. In particular, there were two themes that really stood out to me: worldwide and threat modeling. […]
UN ECE 155 Threats in the real world: Wireless Networking Attacks and Mitigations. A case study
On March the 31st, I gave a quick talk on automotive security at VTM titled “UN ECE 155 Threats in the real world: Wireless Networking Attacks and Mitigations. A case study” (slides here). The idea was to create some content about one of the most hyped topics in the automotive cyber security world over the […]
20 years of OWASP: evolution of threats and defenses
Last week I was invited by our friends of ISACA Venice Chapter to give a talk on the evolution of threats and approaches to defenses in the last 20ys in the OWASP world. We all know that the number of vulnerabilities is constantly growing, we can take a look to the number of CVE from […]
WIP – How to harden your Web.Config in ASP. NET application
0) Disable Trace The trace feature of ASP.NET is one of the most useful tools that you can use to ensure application security by debugging and profiling your Web-based applications. Unfortunately, it is also one of the most useful tools that a hacker can use to attack your Web-based applications if it is left enabled […]
Mobile Screenshot Prevention Cheatsheet – Testing and Fixing
The following article will explain how to test mobile applications against any implemented screenshot prevention mechanism and then it will try to propose mitigations to such problem according to the context. It is the second part of Mobile Screenshot Prevention Cheat Sheet – Risks and Scenarios published on IMQ Minded Security blog. TLDR; None of the proposed solutions […]
A Journey Into the Beauty of DNSRebinding – Part 2
Abstract In the first part, after a fast overview on the DNS Rebinding technique, we considered a practical example in which UPnP services has been exploited to perform NAT Injection attacks and, therefore, expose internal services on Internet. Secondly, we are going to demonstrate how DNS Rebinding could be used to exploit vulnerable services running locally in order to achieve Remote […]
A Journey Into the Beauty of DNSRebinding – Part 1
Abstract DNSRebinding In this first blog post about DNS rebinding topic, we are going to show a practical example of DNS Rebinding attack against UPnP services exposed in a local network. The goal of this post series is to show real attack scenarios against devices exposing services on a local network. That case study tends to happen usually […]
A Journey Into the Beauty of DNSRebinding – Part 1
Abstract In this first blog post about DNS rebindingtopic, we are going to show a practical example of DNS Rebinding attack against UPnP services exposed in a local network. The goal of this post series is to show real attack scenarios against devices exposing services on a local network. That case study tends to happen usually on IoT interconnected home […]
Demystifying Web Cache Threats
Authors Alessandro Brucato Giorgio Rando Introduction Did you know the word “Cache” comes from French and means “Hidden”? If we transpose it to IT we can see why it has been named as such: It is because of its nature. A concealed and faster memory part of a CPU used to overcome the bottleneck of […]
WAF Journey – Fixing Telerik UI Remote Code Execution via Arbitrary File Upload
Introduction It might occur that companies discover vulnerabilities on web application assets that were acquired by third party vendors. What happens if the asset is no longer supported/licensed and cannot be promptly updated by the organization? A viable option is by using a Web Application Firewall (WAF) component using a custom developed rule to block […]
