alaeddine001

11 ms·

1.
Automating Security Research: AI Engine Exploits Complex Blind Code Injection(blog.ostorlab.co)
5 points by alaeddine001 1y ago|0 comments
2.
Spy (Static Python) lang: fast as C, Pythonic as Python(us.pycon.org)
4 points by alaeddine001 2y ago|1 comments
3.
by alaeddine001 2y ago
We have published a new study reviewing the Security Landscape of Mobile Banking Applications in North America. The study is conducted on over 400 Android and iOS applications analyzing their release cycles, features, capabilities, and tech
4.
by alaeddine001 3y ago
Indeed the README page assumes familiarity with the scanner. Updated the readme with the basic commands and referenced another tutorial with in-depth info: https://docs.ostorlab.co/tutorials/run-your-first-scan.html
5.
by alaeddine001 3y ago
You are right, worth fixing.
6.
by alaeddine001 3y ago
There is, see the section "Targetting all subdomains". You can do so by adding your domain name generation tool of your choice, or all. The ones supported for now are `subfinder` and `amass`. Agent Subfinder: https://gi
7.
by alaeddine001 3y ago
https://blog.ostorlab.co/known_exploitable_vulnerabilities_c...
8.
by alaeddine001 3y ago
Good catch, we should indeed make that explicit.
9.
by alaeddine001 3y ago
We did test it on Bug Bounty targets (see article) and found 2.5% of programs to suffer from at least one of these issues.
10.
by alaeddine001 3y ago
Yes everything added is open-sourced: Metasploit: https://github.com/Ostorlab/agent_metasploit Nuclei: https://github.com/Ostorlab/agent_nuclei OpenVas (not used though due to many issues): https
11.
Open-Source Detector of CISA's Known Exploitable Vulnerabilities(github.com)
115 points by alaeddine001 3y ago|49 comments
12.
Known Exploitable Vulnerabilities: Catching them all(blog.ostorlab.co)
5 points by alaeddine001 3y ago|1 comments
13.
New community platform to take pain out of managing vulnerabilites(blog.ostorlab.co)
2 points by alaeddine001 5y ago|1 comments
14.
Automating Mobile navigation for security testing with evolutionary search(blog.ostorlab.co)
3 points by alaeddine001 5y ago|0 comments
15.
Things every mobile security professional should know about WebViews(blog.ostorlab.co)
3 points by alaeddine001 5y ago|0 comments
16.
Robust technique to universal bypass of SSL Pinning, from theory to a full PoC(blog.ostorlab.co)
4 points by alaeddine001 5y ago|0 comments