Andrea Fortuna
AboutSearch
Tools
DFIR Toolkit OSINT Toolkit
  • Sep 17, 2020

    New Mimikatz update adds exploit for ZeroLogon (CVE-2020-1472) vulnerability

    Mimikat's developer Benjamin Delpy, has updated the latest version of the well-known tool to exploit the ZeroLogon vulnerability.… read more »
  • Sep 14, 2020

    Red Commander: open source Red Team C2 Infrastructure

    Red Commander is a red team C2 infrastructure built in Amazon AWS using Ansible. The tool [1] is developed by Alex Williams, security consultant at GuidePoint Security, and can help pentesters improve their defensive responses but can also be used by adversaries to simulate their attacks.… read more »
  • Sep 11, 2020

    Noctilucent brings back 'domain fronting' as 'domain hiding'

    At the DEF CON 2020, the security researcher Erik Hunstad has released a new tool that can help users to evade censorship and bypass firewalls to keep services up inside problematic areas of the globe.… read more »
  • Sep 9, 2020

    Anomaly Six LLC: collecting and selling mobile phone location data using an SDK

    Anomaly Six LLC developed an SDK used by "more than 500 mobile applications", that collect data location and sells it. But, NSA comes to our aid!… read more »
  • Sep 7, 2020

    “Singularity”: a lot of real instruments, in disguise

    In a previous post, I've talked about the idea of go back to record some songs using real instruments. On my new LP ”Singularity”, published on major streaming services today, I've recorded a lot of real instruments in disguise.… read more »
  • Aug 31, 2020

    iOS Forensics: HFS+ file system, partitions and relevant evidences

    In order to perform a correct forensic analysis on a Apple device, a basic knowledge of storage, file allocation methods relevant files paths is always required.… read more »
  • Aug 24, 2020

    Weekly Privacy Roundup #15

    “We will have more Internet, larger numbers of users, more mobile access, more speed, more things online and more appliances we can control over the Internet.” - Vinton Cerf… read more »
  • Aug 21, 2020

    Routopsy: hacking Routing with Routers

    A really interesting talk by Szymon Ziolkowski and Tyron Kemp by SensePost, presented at BlackHat USA 2020.… read more »
  • Aug 19, 2020

    Pen Test Partners: Boeing 747 walk through, from a hacker’s perspective

    Boeing 747s receive critical software updates over 3.5" floppy disks!… read more »
  • Aug 17, 2020

    SANS Institute: how to turn a data breach into an educational opportunity

    The SANS Institute is one of the largest organizations that offer information security training and security certification to users worldwide. In a notification posted recently on their site, the organization states that a phishing attack that target an employee allowed… read more »
  • Aug 14, 2020

    Goodbye Master Bream. Thank you for everything you did

    “I devoted my life to music for a reason, and the reason wasn’t because I wanted to get on or make money, but to try to fulfil myself and also to give people pleasure” - Julian Bream (15 July 1933… read more »
  • Aug 14, 2020

    Re­VoL­TE: decrypting LTE calls to eavesdrop on conversations

    A team of academics from the Ruhr University in Bochum, Germany, has discovered that not all mobile operators follow the 4G standard to the letter of the law: they supports encrypted voice calls, but many calls are encrypted with the… read more »
  • Aug 10, 2020

    Achilles: over 400 vulnerabilities found on Qualcomm’s Snapdragon chip

    Check Point Research reported finding more than 400 bugs in the code used to control the Digital Signal Processing (DSP) cores in Qualcomm's Snapdragon chip families.… read more »
  • Jul 30, 2020

    Cybersecurity Roundup #15

    "Security is always going to be a cat and mouse game because there'll be people out there that are hunting for the zero day award, you have people that don't have configuration management, don't have vulnerability management, don't have patch… read more »
  • Jul 29, 2020

    Why Huawei USB stick setup on linux adds a strange "Huawei Autorun" script in system start?

    "Huawei installed malware on my Linux laptop"? Let's calm down and try to collect more information!… read more »
  • Jul 28, 2020

    Weekly Tech Roundup #14

    "All of the books in the world contain no more information than is broadcast as video in a single large American city in a single year. Not all bits have equal value" - Carl Sagan… read more »
  • Jul 27, 2020

    "Change Of Season": four songs, entirely written by human

    My new EP on Spotify, and some info about my creative process… read more »
  • Jul 24, 2020

    How secure and privacy-oriented is iOS?

    How secure and privacy-oriented is iOS? It’s a question that I’m often asked, from friends, colleagues and clients.… read more »
  • Jul 23, 2020

    Weekly Privacy Roundup #14

    "My inbox is the enemy" - Glenn Greenwald… read more »
  • Jul 22, 2020

    Vulnerable webapps and VMs for penetration testing practice: my own list

    A list that may be useful to readers that are studying for a certification exam or, more simply, to those who just want to have fun!… read more »
« Previous page Next page »

Andrea Fortuna

  • Andrea Fortuna
  • andrea@andreafortuna.org
  • andreafortuna
  • andreafortunaig
  • andrea-fortuna

Cybersecurity expert, software developer, experienced digital forensic analyst, musician