Author: Pablo Plaza Martínez (Page 2 of 6)

Introduction to Frida – Pentesting Android (Part 1)

October 3, 2019 / Pablo Plaza Martínez / 0 Comments

Frida is a dynamic and flexible instrumentation tool. This powerful application can inject into running processes across multiple platforms: Android, iOS, Windows, Mac y QNX.

The utilities of this tool are varied, from performing tests without altering the code, modifying the flow of execution of a program or simply used to observe the state of processes within an application. These utilities we will see them oriented to the search for vulnerabilities and as support for other tasks within the pentesting of Android mobile applications.
Continue reading

¿Me ayudas a compatirlo?

Man in the middle – Modifying responses on the fly with mitmproxy

May 20, 2019 / Pablo Plaza Martínez / 2 Comments

A man in the middle consists of getting into the communication between two devices so that all the traffic passes through us. This allows the theft of data, reading and modification of communications.
In this post we will make modifications to the answers that the victims receive.
Continue reading

¿Me ayudas a compatirlo?

WordPress 5.1 CSRF + XSS + RCE – Poc

March 15, 2019 / Pablo Plaza Martínez / 4 Comments

A few days ago a vulnerability was discovered in WordPress 5.1 that has already been patched in version 5.1.1, in this post we will explain it and exploit it step by step.
The vulnerability starts in a CSRF so it requires user interaction and javascript enabled in the victim’s browser.
Any doubt or correction will be appreciated.
Continue reading

¿Me ayudas a compatirlo?

Bypassing WIFI Network login pages

March 5, 2019 / Pablo Plaza Martínez / 41 Comments

In many hotels, institutes and companies, a captive portal is established to control access to the WIFI network. In this post we will see two real cases in which we could bypass this login, one with a very low protection and another that required more work but once prepared everything allows us to skip the restriction in many of the portals with that same configuration .

¿Me ayudas a compatirlo?

Port Forwarding – CheatSheet

February 23, 2019 / Pablo Plaza Martínez / 1 Comment

Sometimes trying to access or exploit a service from a host that we already have access to, we find that this service is only accessible internally or it is protected by a firewall. So what if we want for example to be able to use tools from our box, then we can use the technique of port forwarding. In this post I will show different methods that can be used in Windows and Linux environments.
If you know more methods or want to make some correction do not hesitate to comment.
Continue reading

¿Me ayudas a compatirlo?