[NEWS] Introducing Shindan, your automated smartphone and tablet security analysis solution

Davy Douhine January 31, 2024 General

An important milestone has been reached at RandoriSec! Since 2015,we’ve been offering our expertise as cybersecurity consulting services and today we’re launching our first software solution: Shindan Shindan is a simple, fast and effective, “Made in France”, solution for securing smartphones and tablets by identifying their weaknesses and vulnerabilities. The advandatages of the Shindan solution are: Obtain a diagnosis in just a few minutes No device requisitioning, no application installation, no MDM enrollment and no manual intervention You don’t have to be a cybersecurity expert to use it No access to user personal data, solely technical files and logs The solution benefits from the expertise that RandoriSec has been building up since 2017 on attack techniques as well as inforensic analysis techniques for mobile terminals.

[SWIFT] Customer Security Programme

Davy Douhine November 14, 2019 General

Since 2017 and as a result of the Bangladesh Bank cyber heist, SWIFT established a Customer Security Programme which describes a set of mandatory and advisory security controls for participants. All customers need to re-attest and confirm full compliance with the mandatory security controls. As stated by SWIFT’s CEO in May 2016: The Bangladesh Bank hack was a watershed event for the banking industry. There will be a before and an after Bangladesh.

[PrivExchange] From user to domain admin in less than 60sec !

Davy Douhine January 28, 2019 0day

Dirk-jan Mollema, a pentester working for Foxit, found a very clever attack allowing any user, owning an Exchange mailbox, to obtain Domain Admin privileges. The attack has been unveiled last week, strangely without a lot of media coverage (but things seem to change, the daily blogpost of the SANS ISC covered the subject yesterday). As there is still no fix (think software patch to install) from Microsoft, the term “0day” is around.

[Conference] SSTIC 2018

Davy Douhine June 19, 2018 General

RandoriSec was at the SSTIC conference in Rennes, France. SSTIC (Symposium sur la sécurité des technologies de l’information et des communications in French) is an old security conference which started in 2003 and the majority of the presentations are in French! This year it was the 16th (0x10) edition occurring at the Couvent des Jacobins, an old convent. Most of the slides and the videos are available at the SSTIC website:

[Conference] HITB Amsterdam 2018

Davy Douhine May 24, 2018 General

RandoriSec was at the Amsterdam 2018 edition of Hack In The Box and… IT WAS A BLAST ! It has been over a month and many tweets, write-ups and even the full slides (https://conference.hitb.org/hitbsecconf2018ams/materials/) have been published so we won’t cover details here but we just wanted to say a few words about it. The agenda was great with two main conference tracks, one dedicated track for the labs and one additional, free and open to public, track: Brida: When Burp Suite Meets Frida - Federico Dotta and Piergiovanni Cipolloni We particularly liked the “Brida” presentation because it introduced a very nice Burp Suite extension that let you play with Frida.

RandoriSec

Davy Douhine December 31, 2014 General

Here at RandoriSec we like hacking and fixing all the things and as we highly promote information sharing we will use this blog to publish our researchs and findings. But first you need to know the Randori ! It is a term used in Japanese martial arts referring to a form of practice in which a designated person defends against multiple attackers in quick succession without knowing how they will attack or in what order.

Categories

Tags