F.P.W Library Sec [ CyberSecurity Book ]

"How security professionals are being attacked: A study of malicious CVE proof of concept exploits in GitHub", 2022. CVE, which stands for Common Vulnerabilities and Expo￾sures1, is a list of publicly disclosed security flaws in software or systems, which have been assigned individual CVE IDs. ]-> Tool: https://github.com/SoftwareSecurityLab/UbSym 📚 @Library_Sec

#tools #Offensive_security "Exploring Widevine for Fun and Profit", 2022. ]-> Widevine Key Ladder Script (Python3): https://github.com/Avalonswanderer/widevine_key_ladder ]-> A tool to trace Widevine execution in Android and dump buffers: https://github.com/Avalonswanderer/wideXtractor Nowadays, people prefer media consumption on over-the￾top platforms (OTT), such as Netflix and Amazon Prime, that distribute multimedia content over the Internet, allowing users to play them whenever they wish. Such ease of viewing the same videos across devices creates challenges for content producers and owners. @Library_Sec

#Mobile_Security #Sec_code_review "Demystifying Hidden Sensitive Operations in Android apps", 2022. ]-> FlowDroid Static Data Flow Analysis Tool: https://github.com/secure-software-engineering/FlowDroid Android is the most adopted mobile operating systems in terms of users, applications and developers . However, its popularity means that legitimate developers must co-exist with malware writers. @Library_Sec

#Research "Evaluating Susceptibility of VPN Implementations to DoS Attacks Using Adversarial Testing", 2022. In today’s Internet ecosystem, enterprise networks are often dispersed over several locations, such as corporate branches, data centers, and infrastructure hosted by cloud providers. VPN systems are an integral part of these setups, serving as the glue that securely connects the different locations by encrypting and authenticating traffic between pairs of endpoints over an untrusted network such as the Internet. Given this role, VPN protocols are as ubiquitous in emerging SD-WAN deployments as they are in more traditional site-to-site connections. More￾over, the recent shift to remote work has led to a surge in VPN use . @library_sec