[ Android ]  How to repair a DEX file, in which some key methods are erased with NOPs http://blog.fortinet.com/2017/04/05/how-to-repair-a-dex-file-in-which-some-key-methods-are-erased-with-nops

[ Browser ]  Microsoft Edge - Detecting Installed Extensions from JS A generic method that works without manifest cooperation. ?… https://twitter.com/i/web/status/850012348412833792

[ Browser ]  WebKitGTK+ Security Advisory WSA-2017-0003 https://webkitgtk.org/security/WSA-2017-0003.html

[ iOS ]  How receiving a malformed GIF emoji corrupts your beloved apps on macOS/iOS - writeup on CVE-2017-2416 released https://blog.flanker017.me/cve-2017-2416-gif-remote-exec/

[ IoTDevice ]  How I found a command injection vulnerability in my TV set while in bed (and how I exploited it using nc) : https://www.netsparker.com/blog/web-security/hacking-smart-tv-command-injection/

[ MalwareAnalysis ]  My new post for @ Malwarebytes : "#DiamondFox – part 2: let’s dive in the code": https://blog.malwarebytes.com/threat-analysis/2017/04/diamond-fox-p2/

[ MalwareAnalysis ]  IoT/Linux botnet #Amnesia (a Tsunami variant) exploit DVR device vulnerability, evade and wipe Linux virtual machine:http://researchcenter.paloaltonetworks.com/2017/04/unit42-new-iotlinux-malware-targets-dvrs-forms-botnet/

[ Others ]  bash-guide : A guide to learn bash : https://github.com/Idnan/bash-guide

[ SecurityReport ]  Our new Threats Report shares research into the #Mirai bot, which has infected ~2.5 million #IoT devices:… https://twitter.com/i/web/status/849975888166780929

[ Tools ]  Relyze 2.4 is now available, with integrated assembler support! http://blog.relyze.com/2017/04/relyze-24-now-with-integrated-assembler.html https://t.co/jUyQtkVMqd

[ Tools ]  Slides from our "Exploring your system deeper" in @ CanSecWest : http://www.c7zero.info/stuff/csw2017_ExploringYourSystemDeeper_updated.pdf with finding FW/HW vulns, FW implants using @ CHIPSEC

[ Tools ]  mhn : Multi-snort and honeypot sensor management (Modern Honey Network) : https://github.com/threatstream/mhn

[ Tools ]  RequestBin — Collect, inspect and debug HTTP requests and webhooks : http://requestb.in/

[ Tools ]  Evilginx - Advanced Phishing with Two-factor Authentication Bypass : https://breakdev.org/evilginx-advanced-phishing-with-two-factor-authentication-bypass/ , Demo : https://www.youtube.com/watch?v=rPIURsHO5xU cc @ mrgretzky

[ Windows ]  My updated wp and PowerPoint for: Hack Microsoft Using Microsoft Signed Binaries https://www.blackhat.com/docs/asia-17/materials/asia-17-Braeken-Hack-Microsoft-Using-Microsoft-Signed-Binaries.pdf https://t.co/62r0t4iNnR #bhasia2017

[ Windows ]  Microsoft Finally Reveals What Data Windows 10 Collects http://www.theverge.com/2017/4/5/15188636/microsoft-windows-10-data-collection-documents-privacy-concerns

[ Windows ]  Windows 10 Interrupt Dispatching Internals http://codemachine.com/article_interruptdispatching.html. #wininternals #WindowsInternals #Windows10 #WindowsKernel