kojenov

Serious vulnerabilities (including a backdoor) in IPTV/H.264/H.265 video encoders based on HiSilicon hi3520d hardware.

This article discloses critical vulnerabilities in IPTV/H.264/H.265 video encoders based on HiSilicon hi3520d hardware. The vulnerabilities exist in vendor application software running on these devices. All vulnerabilities are exploitable remotely and can

Ten days ago, I've made my first attempt at OSWE certification , and today I received the official confirmation: I passed!!! Here is my review of the course and the exam. AWAE course I've bought 30 days of AWAE lab access and sched...

During a recent pentest, I needed to test an iOS app. Since the app was not in the App Store yet, it was given to me in the form of an .ipa file. I had to figure out a way to load it to my test iPhone. Apparently, there are several instructions on the Int

"You're one of 772,904,991 people pwned in the Collection #1 data breach" … Many of us have received an email with this subject line from Troy Hunt's Have I Been Pwned service about 3 weeks ago. By design, that service doesn't tell you exactly which accou

View more about this event at AppSec US 2018 (Please, make sure you register to attend)

Insecure deserialization was recently added to OWASP's list of the top 10 most critical web application security risks , yet it is by no means a new vulnerability category. For years, data serialization and deserialization have been used in applications,

One of my favorite things to do around Christmas is to participate in SANS Holiday Hack Challenges . These challenges are a fun way to learn and practice hacking skills. They are released once a year around Christmas and cover a broad range of technologie

Apache Struts and Equifax: real life consequences 9/14/2017 Update: The Apache Struts vulnerability discussed in this blog was found to be the flaw that led to the Equifax data breach. While hacking games are fun, it's a reminder that legitimate applicati

I published an article on IBM developerWorks . Yippee!!!