Satish – Medium

Published in

·Nov 6

Effortless AWS Security Group Cleanup with SG-Cleaner

Introduction In the world of AWS cloud infrastructure, security groups play a crucial role in controlling inbound and outbound traffic to your resources. However, managing these security groups efficiently can be a challenge, especially when dealing with unused or redundant ones. In this blog post, we’ll introduce you to SG-Cleaner, a…

Aws Security

2 min read

Aws Security

2 min read

Published in

My InfoSec Write-ups

·Aug 2

Shift left security — IaC

In the ever-evolving world of software development, Infrastructure as Code (IaC) has emerged as a critical practice to streamline and automate the provisioning of infrastructure resources. This blog post aims to provide a comprehensive understanding of IaC, Terraform, vulnerability scanning using CSPM (Cloud Security Posture Management), and the importance of…

Infrastructure As Code

6 min read

Infrastructure As Code

6 min read

Published in

AndroGoat

·Dec 9, 2020

Intercept HTTPS Traffic from Android App — AndroGoat -Part 3

In Intercept HTTPS Traffic from Android App — AndroGoat -Part 2 it was shown how to repackage the application to bypass network security config. …

Androgoat

2 min read

Androgoat

2 min read

Published in

My InfoSec Write-ups

·Dec 9, 2020

Frida Installation

Frida is Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers. Dynamic instrumentation is the process of modifying the instructions of a binary program while it executes. It is possible to inject your own scripts into application processes and hook any function, spy on crypto APIs or trace private application…

Frida

2 min read

Frida

2 min read

Published in

AndroGoat

·Aug 22, 2020

Intercept HTTPS Traffic from Android App — AndroGoat -Part 2

In Intercept HTTPS Traffic from Android App — AndroGoat -Part 1, it was shown how to intercept HTTPS traffic from Android devices with API 23( version 6 Marshmallow) or below. …

Androgoat

4 min read

Androgoat

4 min read

Jun 2, 2020

HTML Injection in GoToMeeting Chat — MAC

I wanted to test GoToMeeting for UNC Path Injection vulnerability after it was disclosed in Zoom meeting. I started testing in GoToMeeting Hub software in Windows but no luck. Then I tried for XSS/HTML Injection and it was displayed as normal text. Good! controls are in place. Then I tested…

Html Injection

2 min read

Html Injection

2 min read

Published in

AndroGoat

·Feb 12, 2020

Intercept HTTPS Traffic from Android App — AndroGoat -Part 1

In previous article I have shown how to intercept HTTP traffic from Android app. Now, in this section we will learn how to intercept HTTPS traffic from Android app in Android OS 6.0(API 23) or below. The extra step here is to add proxy certificate to trusted certificates list in…

Androgoat

3 min read

Androgoat

3 min read

Published in

AndroGoat

·Feb 11, 2020

Intercept HTTP Traffic from Android App — AndroGoat

This is the first tutorial on AndroGoat. In this tutorial we will learn how to intercept traffic from Android app. Most of the applications use protocols like HTTP(S) to send and receive to and from Servers. Analyzing the traffic between Mobile app and End points will help to test server-side…

Android Security

2 min read

Intercept HTTP Traffic from Android App — AndroGoat

Android Security

2 min read

Published in

AndroGoat

·Sep 23, 2019

AndroGoat

AndroGoat is purposely developed open source vulnerable/insecure app using Kotlin. Security Testers/Professionals/Enthusiasts, Developers…etc. can use this application to understand and defend the vulnerabilities in Android platform. This is the first vulnerable app developed using Kotlin. If you are looking to learn Android Application Security Testing then AndroGoat is a perfect…

Android

1 min read

Android

1 min read