AutoPro and 3rd Party Carplay/Android Auto Dongle Security Research

I have some very backlogged projects I've decided to just release to get them out of my backlog. The first one is related to aftermarket Apple CarPlay and Android Auto dongles. This release is the majority of my notes, tools, findings, and research artifacts from looking at the Mayton/AutoPro-style dongle ecosystem. It includes documentation, test … Continue reading AutoPro and 3rd Party Carplay/Android Auto Dongle Security Research →

CVE-2022-37857, CVE-2022-37163, CVE-2022-37164 Hardcoded Credentials/Weak Password Policies

A location sharing open source server and android client was found to hardcode credentials and allow weak passwords by default (including blank passwords!)

The best list for Android Offensive and Defensive Security!

A MUST have for anyone who is experienced or new to Android penetration testing.

Parameter Wordlist Scrapped from Popular Android Apps?

A new wordlist to add to TreeHouse Wordlists... An Android (APK) parameter list scrapped from popular apps.

Under Utilized Tools/Resources #84

A new tool for exploring/exploiting misconfigurations in FireBase datastores!

How to install NetHunter on Any Android Phone (Nexus 6p) 2021

Complete instructions on how to install kali nethunter on any android device updated for 2021!

Technique, Tool and Lecture #12

Next entry of Technique, Tool and Lecture AKA every hackers TLC!

Under Utilized Tools/Resources #2

Part 2 of under utilized or used tools and resources for penetration testing and hacking

How to install NetHunter on Any Android Phone (Nexus 6p)

Complete instructions on how to install kali nethunter on any android device

Under Utilized Tools/Resources #1

Many resources, especially web apps/sites used for OSINT come and go as I've mentioned before. However there is one resource I discovered a few years ago and still exists. It is a unique resource but still useful. It's useful for OSINT or just to monitor trends in blackhat circles, but rarely will you find something … Continue reading Under Utilized Tools/Resources #1 →