Application Security Enginner at Axway and security researcher during spare-time, with more than 6 years of experience in software and security industry. With background in exploit development, malware analysis, network traffic and digital forensics. Occasionally blogger. Currently focusing on web apps penetration testing and SecDevOps. Most passionate about binaries reverse engineering and fuzzing.

Hacking The Hacker : The Story

What happens when you hack the infotainment system of a car and then sell your hack as a service? What happens when you do that but forget to defend yourself?

You get hacked.

This is a story from the real world, that showcase a complete and complex process of how to combine different attack techniques in order to gain free access to an Android application which is payed otherwise. We will get to know the how’s and why’s of different attacks, from network infrastructure to web application and even to reverse engineering Android applications, along with the tools used. We will also identify how these attacks could have been mitigated. This real-world scenario displays how a mix of weak password policy, lack of brute force attack mitigation, security misconfiguration, security best practices ignorance plus a broken application license mechanism can break your business.

One thought to keep in mind: This is not a talk about automotive.