Andrea Fortuna
AboutRss
  • Apr 26, 2017

    How to spot a fake guitar in seconds

    Keep your eyes (and ears) open! Is it really possible to buy a non-original guitar? Yes! Furthermore it can happens in unexpected places like a used instruments store, as shown by these two videos made by Kennis Russell: [embed]https://www.youtube.com/watch?v=q-W3b3d4sz0[/embed] [embed]https://www.youtube.com/watch?v=t4QdOJ1B_kI[/embed] In… read more »
  • Apr 24, 2017

    Automated memory capture and analysis on Linux with Linux Memory Grabber

    A script for dumping Linux memory and creating Volatility profiles I have already written something about dump of volatile memory on Linux systems.Recently i have discovered this useful script developed by Hal Pomeranz, that automate all steps required to perform… read more »
  • Apr 21, 2017

    ENISA training resources for cybersecurity incidend response

    A really useful free training course ENISA (European Union Agency for Network and Information Security) is a centre of expertise for cyber security in Europe, with main mission of contribute to securing Europe’s information society by raising “awareness of network and… read more »
  • Apr 20, 2017

    Four tools for File Carving in forensic analysis

    Useful to extract files from inside disk and memory images   File carving is the process of reassembling computer files from fragments in the absence of filesystem metadata. This is done by analyzing the raw data and identifying what it is… read more »
  • Apr 19, 2017

    0-Day vulnerabilities in Apache Struts: a plague for companies?

    In the last months, Apache Struts was afflicted by some serious 0-Day vulnerabilities, that allows remote code execution on unpatched hosts Every security expert trembles with fear when he reads “RCE” (Remote Code Execution) on a disclosure document, and read… read more »
  • Apr 18, 2017

    Phishing with Unicode Domains, an attack almost impossible to detect

    The vulnerability affects Chrome, Firefox and Opera The security researcher Xudong Zheng has discovered a new technique for phishing attacks: using an homograph attack, Zheng discovers that is possible to display a fake domain names as the websites of legitimate services,… read more »
  • Apr 17, 2017

    One-Line Perl Portscanner

    Just for fun! Do you need a simple portscanner? Make it with a single line of Perl! [embed]https://gist.github.com/andreafortuna/ab386f11d12d5305c069193f6680b25a[/embed] Thats it! :-) … read more »
  • Apr 14, 2017

    ShadowBrokers releases some 0-Day Remote Code Execution exploits on Microsoft Windows…

    …turn off your Windows computers for the weekend and go enjoy the nice weather! UPDATE: Microsoft response that exploits were patched in the last month update: Most of the exploits that were disclosed fall into vulnerabilities that are already patched in… read more »
« Previous page Next page »

Andrea Fortuna

  • Andrea Fortuna
  • andrea@andreafortuna.org
  • andreafortuna
  • andrea-fortuna
  • andrea

Cybersecurity expert, software developer, experienced digital forensic analyst, musician