06 2015 档案

Wisec mobile phone session
摘要：CICC:Permission manager: revoke permissions from appsthe permission manager cannot remove permissions effectively.component instance based call chain:... 阅读全文

posted @ 2015-06-25 11:20 CarrieSmile 阅读(263) 评论(0) 推荐(0)

WiSec session 2: DroidJust
摘要：tasks:T1. discover sensitive info transmissionT2. detect privacy leakage : distinguish malicious or benign usechallenges:c1. fuzzy nature of privacy l... 阅读全文

posted @ 2015-06-25 03:21 CarrieSmile 阅读(254) 评论(0) 推荐(0)

BlackHat 2013 - Traffic Interception & Remote Mobile Phone Cloning with a Compromised CDMA Femtocell
摘要：https://www.youtube.com/watch?v=1yR3F9hnwGU首先普及一下Femtocell: https://zh.wikipedia.org/wiki/%E5%AE%B6%E5%BA%AD%E5%9F%BA%E7%AB%99家庭基站（英语：Femtocell，又譯為毫微微... 阅读全文

posted @ 2015-06-19 00:05 CarrieSmile 阅读(191) 评论(0) 推荐(0)

Hack all the things: 20 devices in 45 minutes
摘要：https://www.youtube.com/watch?v=h5PRvBpLuJs3 main methods:(1)use UART adapter to talk to debug parts, get to the device where we shouldn't be able to.... 阅读全文

posted @ 2015-06-17 23:38 CarrieSmile 阅读(232) 评论(0) 推荐(0)

how to build a spyphone
摘要：地址：https://www.youtube.com/watch?v=h98KtUgUOsg思想：将攻击代码写成service，嵌入到已有的popular apps.利用的是service可以在后台运行（不会影响app原有的用户体验），重启之后也可以再次启动。command & control可以做... 阅读全文

posted @ 2015-06-13 22:36 CarrieSmile 阅读(218) 评论(0) 推荐(0)

To-watch list
摘要：Interesting presentations to watch later:https://www.youtube.com/watch?v=31D94QOo2gYhttps://www.youtube.com/watch?v=1fszkxcJt7U展示工具可以长距离（3英尺以外）读取门禁卡的信... 阅读全文

posted @ 2015-06-04 23:27 CarrieSmile 阅读(235) 评论(0) 推荐(0)

Comprehensive Virtual Appliance Detection
摘要：https://www.youtube.com/watch?v=PokQ93Cbo0s&index=1&list=PLhUfFfySNmGXVikmiEWsw0iXBZ5IWOy8Ovirtual appliance: 只能运行某一类或者某一个软件的virtual box，因此不能用传统的手段检测（... 阅读全文

posted @ 2015-06-04 22:50 CarrieSmile 阅读(181) 评论(0) 推荐(0)