depierre

11 ms·

1.
Locked Up but Not Locked Out: iOS App Pentesting Without Jailbreak(anvilsecure.com)
1 points by depierre 6mo ago|0 comments
2.
Breaking Sapcar: Four Local Privilege Escalation Bugs in SAR Archive Parsing(anvilsecure.com)
1 points by depierre 9mo ago|0 comments
3.
by depierre 11mo ago
One of my personal favorites. I've used it for parsing SAP's RPC network protocol, reverse-engineering Garmin apps [0], and more recently in a CTF challenge that involved an unknown file format, among others. It's surprisingl
4.
by depierre 1y ago
It's really about striking a balance: giving vendors a fair chance to patch, while also not leaving users in the dark indefinitely. That's also why the 90-day disclosure policy has become common in the industry (e.g., Google'
5.
by depierre 1y ago
SAP can mean so many things that it's easy to get lost in the weeds, and I'm just talking about getting familiar with their landscape... While working on that post, I found new vulnerabilities that SAP is now addressing. I'll
6.
by depierre 3y ago
It's not something I've encountered yet so I don't have any insight to share. I would be surprised if they were secured differently but I'm purely speculating here.
7.
by depierre 3y ago
Your remark seems to match what I've observed during the reverse engineering part of the project. With magic constants like `0xc0debabe` [0] or opcodes like `canhazplz` [1] that you would expect more from a student CS project for insta
8.
by depierre 3y ago
Author here. Fair question! They get access to the internet via the Garmin Connect companion app. But if you're asking to know if they can be exploited from the internet, that's not what we showed yeah. The vulnerabilities we&#x27
9.
by depierre 3y ago
Author here. They did start encrypting the firmware of their latest devices. I noted that the firmware images for Forerunner 55, 945 and 955 were encrypted. Most likely others are as well. In the live demo I did at Hack in the Box a couple
10.
by depierre 3y ago
Author here. Thanks! I am surprised as well, especially considering that their compiler does little to actually no optimization. For instance, it won't remove dead code or unused variables. These seem like low hanging fruits that could