[CONFERENCE] Pass the SALT 2024

Julien Reveret July 15, 2024 Conference

For the third time in a row, we’ve followed Pass the SALT, a small but high quality, three days, conference dedicated to free software and security. This edition, that we sponsored, gave 21 talks but also 9 workshops with top-notch speakers (and attendees of course). Here are all the slides and videos of the talks and rumps. And as usual, you can find a quick review of our favourite talks.

[CONFERENCE] Pass the SALT 2022

Brendan Guevel July 15, 2022 Conference

Pass the SALT est une conférence combinant deux domaines : la sécurité informatique et le logiciel libre. La première édition a vu le jour en 2018, et après deux années en mode online, l’évènement revient sur site à Polytech Lille en 2022. Les conférences sont gratuites et anglophones. Il est important de souligner que l’ensemble des logiciels présentés lors de la conférence sont des logiciels libres. Voici une sélection des présentations auxquelles nous avons assisté.

[PUBLICATION] Mobile Hacking CheatSheet

Davy Douhine August 25, 2021 Publications

Last year, after noticing that no serious cheatsheet about mobile security was around, we’ve published a first attempt to summarise a few interesting basics info regarding tools and commands needed to assess the security of Android and iOS mobile applications. It seemed well received by the security community and the bug bounty community, in particular despite a few typos. We’ve released a special version for the HITBCyberWeek a few months later, without the typos.

[TRAINING] Mobile Hacking Online - June 2021

Davy Douhine April 7, 2021 Training

We are pleased to announce that we are going to give a new session of our Mobile Hacking training in an online form!. Save the date June 21, 22 and 23 2021. Here is the pitch of the training: Guillaume Lopes and Davy Douhine, senior pentesters, will share many techniques, tips and tricks to deliver to pentesters, bug bounty researchers, app makers or just curious a 100% hands-on 3 days mobile training.

[WORKSHOP] BSides Dublin 2021 - Android/iOS Mobile Hacking Workshop

Davy Douhine March 30, 2021 Training

This year, RandoriSec had the chance to deliver a mobile hacking workshop at BSides Dublin. The first two hours of the workshop were dedicated to Android and was delivered by Guillaume Lopes. Then, the second part was focused on iOS and was presented by Davy Douhine. We would like to thank the BSides Dublin organizers and all people involved for the awesome event and also the speakers for the great talks.

[WORKSHOPS] BSides Budapest 2020 - Android and iOS workshops online

Guillaume Lopes May 29, 2020 Workshop

Last year, at BSides Budapest, we delivered a workshop about Mobile Hacking on Android and iOS. The idea, we had at this time, was to give a very short introduction of our 3 days training about Mobile Hacking. Note: This training was already delivered at Hack In Paris (2019), at DeepSec (2018 and 2019) and also online (2020). However, we noticed that 2 hours are too short to be able to introduce different concepts in Android and iOS mobile apps…

[TRAINING] Mobile Hacking

Davy Douhine April 27, 2020 Training

Security conferences are an excellent way to access top-notch quality trainings but with all this actual mess they are cancelled or postponed. However, life keeps going and we still need to train in order to improve our skills. So, we are pleased to announce that we are going to offer our Mobile Hacking training in an online form! Of course, we prefer to have real interactions with the attendees because we think it’s the best way to give trainings but as nodoby actually knows when this will be possible again, we want to try our best to continue to train whoever wants to learn mobile security.

[SWIFT] Customer Security Programme

Davy Douhine November 14, 2019 General

Since 2017 and as a result of the Bangladesh Bank cyber heist, SWIFT established a Customer Security Programme which describes a set of mandatory and advisory security controls for participants. All customers need to re-attest and confirm full compliance with the mandatory security controls. As stated by SWIFT’s CEO in May 2016: The Bangladesh Bank hack was a watershed event for the banking industry. There will be a before and an after Bangladesh.

[PUBLICATION] Éprouver la sécurité des applications mobiles

Davy Douhine October 30, 2019 Publications

Guillaume et moi-même avons écrit trois articles sur la sécurité des applications mobiles (tout le dossier en fait ;), qui ont été publiés dans le magazine MISC106 de novembre/décembre : Contournement de l’API Google Play Billing (for fun and profit ;) Auditer la sécurité d’une application iOS (avec et sans jailbreak) Présentation du Mobile Security Testing Guide de l’OWASP (devenu LA référence dans le domaine) Comme à notre habitude nous aurions aimé opter pour une licence CC dans le but de mettre les articles à disposition au plus grand nombre dès l’expiration des droits d’auteur, mais cela n’a été possible que pour un seul des trois articles.

Categories

Tags