ZeroDay UZ (lab)

iOS Penetration Testing Cheat Sheet https://github.com/ivan-sincek/ios-penetration-testing-cheat-sheet

Configuring an Android Phone for Pentesting https://www.blackhillsinfosec.com/start-to-finish-configuring-an-android-phone-for-pentesting/

Set Up an Android Hacking Lab for $0 https://www.trustedsec.com/blog/set-up-an-android-hacking-lab-for-0/

Mobile Pentesting 101 – How to set up your Android Environment https://securitycafe.ro/2023/04/03/mobile-pentesting-101-how-to-set-up-your-android-environment/

Near-Ultrasound Inaudible Trojan (NUIT): Exploit smartphone speaker voice assistants with inaudible sound to perform commands Paper: https://sites.google.com/view/nuitattack/home Video demo: https://youtu.be/TUnPFR35AR4

Exploiting aCropalypse: Recovering Truncated PNGs (CVE-2023-21036) Vulnerability in the Google Pixel's inbuilt screenshot editing tool, Markup, enabling partial recovery of the original, unedited image data of a cropped and/or redacted screenshot. https://www.da.vidbuchanan.co.uk/blog/exploiting-acropalypse.html Report: https://issuetracker.google.com/issues/180526528 Vulnerability online test: https://acropalypse.app/

Multiple Internet to Baseband Remote Code Execution Vulnerabilities in Exynos Modems affecting multiple Android devices https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html

Android Application Security Testing Series Part — One https://medium.com/@mk2011sharma/android-application-security-testing-series-part-one-5c346948fb27

Exploring iOS Applications with Frida and Objection: Basic Commands for Pentesting https://medium.com/@mk2011sharma/exploring-ios-applications-with-frida-and-objection-basic-commands-for-pentesting-4c637dbeb9fd

Shodan Api Keys ( Paid Plan ) https://api.shodan.io/api-info?key={API} OefcMxcunkm72Po71vVtX8zUN57vQtAC PSKINdQe1GyxGgecYz2191H2JoS9qvgD pHHlgpFt8Ka3Stb5UlTxcaEwciOeF2QM 61TvA2dNwxNxmWziZxKzR5aO9tFD00Nj xTbXXOSBr0R65OcClImSwzadExoXU4tc EJV3A4Mka2wPs7P8VBCO6xcpRe27iNJu mEuInz8UH1ixLGJq4oQhEiJORERVG5xc

Fortinet FortiNAC Unauthenticated RCE PoC: https://github.com/horizon3ai/CVE-2022-39952 Research: https://www.horizon3.ai/fortinet-fortinac-cve-2022-39952-deep-dive-and-iocs/ #fortinet #fortinac #rce #cve