Tools

Introduction The development of mobile networks has been intrinsically linked to the evolution of user security. In previous generation architectures (2G, 3G, and 4G), subscriber identity management relied on the transmission of the IMSI (International Mobile Subscriber Identity) in plain text during certain phases of the registration protocol. This design, while functional for network interconnection, created a cryptographic vulnerability of a physical nature. The exposure of the IMSI allows the execution of passive capture attacks, commonly known as IMSI catchers. These devices operate as fake base stations, whose objective is not to decrypt encrypted traffic, but simply to intercept the identity in clear text, which enables tracking and data correlation over time and space. ...

Introduction Kubernetes has become the de facto container orchestration platform, but its flexibility comes with a considerably broad attack surface. A misconfigured cluster can expose credentials in environment variables, run containers with root privileges, lack network policies, or have RBAC roles with wildcard permissions granting unrestricted access to any resource. Detecting all these issues systematically and repeatably requires reviewing dozens of objects spread across multiple namespaces, doing it manually is slow, error-prone, and hard to document. ...

Introduction k8s_audit.py is a security auditing tool for Kubernetes clusters focused on misconfiguration enumeration and penetration testing in containerised environments. All operations are strictly read-only: the tool never modifies cluster state, making it safe to run against production environments without risk of disruption or unintended side effects. The tool is organised into twelve independent audit modules, each targeting a specific attack surface within a Kubernetes cluster. Modules can be run individually or in any combination, allowing the scope of the audit to be tailored to the specific needs of each environment. The available modules are: ...

Introduction The Flipper Zero is a multifunction device for hacking, security testing and radio frequency protocol exploration. One of its most highlighted features is the ability to transmit and receive SubGHz signals, using the Texas Instruments CC1101 chip, a programmable low-power RF transmitter. SubGHz refers to the range of radio frequencies below 1 GHz (typically between 300 MHz and 928 MHz, depending on the region). These frequencies are used by devices such as remote garage door controls or wireless sensors (temperature, movement, alarms). ...

Introduction️ Webpack is a module bundler for modern JavaScript applications. Its main function is to take modules with dependencies and generate static assets that represent those modules. Webpack can handle a variety of files and convert them into a single file or several files that are more efficient to serve in a web application.️ The source maps are files that map the compressed or transformed code (such as the one produced after compilation and minification with Webpack) to its original source code. These files are extremely useful for debugging, since they allow developers to see and work with the original code in the browser, even if the code actually running has been transformed.️ ...

Introduction️ A blind SQL injection is a type of SQL injection attack in which an attacker attempts to execute SQL commands on a database without receiving direct feedback about the results of queries. However, attackers can infer useful information by observing the application’s behavior or response time. In this case, the technique based on time will be used, although there is also one based on booleans.️ Here, the attacker introduces a SQL query that makes the database wait for a certain time before responding. If the application takes longer to respond, the attacker can infer that the injection was successful. For example, an attacker could try: ...

Introduction️ Firebase Firestore is a NoSQL cloud database provided by Google as part of the Firebase platform that allows developers to store, synchronize and query data in real-time for web, mobile and server applications. Data are organized into individual documents grouped into collections. Each document is a JSON data structure containing key-value pairs.️ Regarding the possible security issues that could be left unprotected by a project that uses Firebase Firestore, here are some points to consider: ...

Introducción The buffer overflow, also known as buffer overflow, is a security vulnerability in software programming that occurs when more data is introduced into a memory area (buffer) than it can handle. This situation may allow an attacker to overwrite adjacent data in the memory, which potentially leads to the execution of malicious code or alteration of a program’s flow.️ When a program does not verify the amount of data entered into a buffer, it risks an attacker exploiting this weakness to inject malicious code, overwrite important information or even take control of the system. Prevention of buffer overflow involves good programming practices and the use of security techniques such as input validation and boundary checking to prevent this type of vulnerability.️ ...

Introduction️ The web MalAPI.io collects a list of Windows APIs that can be used by malicious programs to perform unwanted actions on the operating system. To analyze executables in search of these strings, a Python tool has been developed that automatically scans the file passed as a parameter.️ Use of MalAPI Scanner️ To use, simply pass the executable file to analyze as a parameter and have the malapi.json file in the same directory with the API database extracted from the website. This is an example of its execution.️ ...

Introduction️ A MPEG-TS file is a file format used to transmit video, audio and other types of data in digital broadcasting systems, such as terrestrial digital television (TDT). HbbTV (Hybrid Broadcast Broadband TV) is a specification that combines traditional broadcast television with internet-based services. HbbTV uses standard web technologies like HTML, JavaScript and CSS to provide this interactive experience for users.️ The Application Information Table (AIT) is an important part of the MPEG-TS standard used specifically in the context of HbbTV. The AIT table provides information about interactive applications available for a particular digital television service. It contains metadata related to the applications, such as their name, description, application type, launch URL, etc.️ ...