Andrea Fortuna
AboutSearch
Tools
DFIR Toolkit OSINT Toolkit
  • Aug 12, 2019

    Why WhatsApp (and Telegram) messages are not really private?

    Do you think chatting in WhatsApp is completely private. No, sadly it's not! #privacy #whatsapp #telegram #signal #briar #riotim #metadata #e2e… read more »
  • Aug 8, 2019

    Reverse engineering and penetration testing on iOS apps: my own list of tools

    After a post focused on Android, another list of tools useful for penetration testing and reverse engineering of iOS applications. Also all this tools are OSS and freely available. … read more »
  • Aug 7, 2019

    CVE-2019-1125, "SWAPGS Attack": a new speculative execution side-channel attack

    Security researchers at Bitdefender disclosed a new way of exploiting a flaw in Intel chips. … read more »
  • Aug 7, 2019

    Some useful tools for finding unsecure Google Storage Buckets

    And some suggestion to hardening your buckets! … read more »
  • Aug 5, 2019

    Identity theft prevention? According to Bruce Schneier is basically useless

    Can I avoid identity theft? No, you can't! You can only prevent criminals from using your personal information, which they almost certainly already have. #privacy #cybersecurity #identitytheft #bruceschneier… read more »
  • Aug 2, 2019

    Facebook is working on a backdoor on WhatsApp end-to-end encryption

    Some months ago, Speigel Onlinereported on comments by Germany’s Interior Minister Horst Seehofer, who proposed greater governmental access to end-to-end encrypted communications, such as those by WhatsApp and Telegram. … read more »
  • Aug 1, 2019

    Forensic analysis of Windows 10 compressed memory using Volatility

    Memory analysis on Windows 10 is pretty different from previous Windows versions: a new feature, called Memory Compression, make it necessary a forensic tool able to read compressed memory pages. … read more »
  • Jul 31, 2019

    CVE-2019-0708 "Bluekeep": Immunity Inc. starts to sell a exploit with full RCE capabilities

    Cybersecurity firm Immunity Inc. decided to sell a BlueKeep exploit module capable of full remote code execution as part of its penetration testing toolkit. … read more »
  • Jul 29, 2019

    Yes, even geeks go on vacation!

    I’m going on vacation and get offline for a few days to recharge my batteries. … read more »
  • Jul 27, 2019

    CVE-2019-9848: (un)patched flaw in LibreOffice allows malicious code execution

    This vulnerability, discovered by Nils Emmerich, resides in LibreLogo, a programmable turtle vector graphics script that ships by default with LibreOffice, and still exists in the latest version has been patched in version 6.2.5. … read more »
  • Jul 26, 2019

    Software Developers and Security: a love-hate relationship

    Recently, GitLab performed a survey on over 4,000 developers and operators, with interesting results. … read more »
  • Jul 25, 2019

    How to retrieve hard disk information and properties with WMIC and lsblk

    A couple of very brief tip, useful during a forensic acquisition. … read more »
  • Jul 24, 2019

    No, your browser "Incognito Mode" can't stop Facebook and Google track your porn habits!

    Yes, that’s an uncomfortable topic! … read more »
  • Jul 23, 2019

    QCSuper: A tool for capturing 2G/3G/4G air traffic on Qualcomm-based phones

    QCSuper is a tool allowing to capture raw 2G/3G/4G radio frames, generating PCAP captures using Qualcomm-based phones and modems. … read more »
  • Jul 21, 2019

    The SyTech Hack: a brief screenshot-based attack analysis

    Last weekend, on July 13, a group of hackers going by the name of 0v1ru$ hacked into Active Directory server of SyTech, a contractor for FSB, Russia’s national intelligence service. From this server they gained access to the company’s entire… read more »
  • Jul 19, 2019

    Kazakhstan government begins intercepting all citizens’ HTTPS traffic

    Do you want to know the reason why? To “protect them from cyber threats”! … read more »
  • Jul 19, 2019

    FaceApp privacy concerns: is it safe to use the app that make yourself look older?

    It’s the killer app of the last weeks, but FaceApp has been giving people the power to change their facial expressions, looks, and now age, since 2017. … read more »
  • Jul 18, 2019

    Reverse engineering and penetration testing on Android apps: my own list of tools

    This list of tools is really useful both in penetration testing on an Android application and in reverse engineering of a suspicious application. All tools are OSS and freely available: so, enjoy! … read more »
  • Jul 17, 2019

    Elon Musk unveils Neuralink: tiny wires in the brain to read electrical pulses and let humans 'merge with computers'

    Ok, it sounds like science fiction, but it’s not. At its presentation at the California Academy of Sciences, Elon Musk‘s revealed that brain-computer interface company Neuralink its plans to begin human trials of its neuron-reading technology next year. … read more »
  • Jul 17, 2019

    Commando VM: a full Windows-based penetration testing virtual machine distribution

    Months ago, I published a post about Flare VM, a project by Fireeye/Mandiant researcher focused on the creation of a Windows-based security distribution for malware analysis. … read more »
« Previous page Next page »

Andrea Fortuna

  • Andrea Fortuna
  • andrea@andreafortuna.org
  • andreafortuna
  • andreafortunaig
  • andrea-fortuna

Cybersecurity expert, software developer, experienced digital forensic analyst, musician