Ajin Abraham ajinabraham

How to Build a Successful Information Security Career (Daniel Miessler)
- https://danielmiessler.com/blog/build-successful-infosec-career/#gs.DtVCbbw
The First Steps to a Career in Information Security (Errata Security - Marisa Fagan)
- http://blog.erratasec.com/2010/04/first-steps-to-career-in-information.html#.WFrbofkrIuU
Hiring your first Security Professional (Peerlyst - Dawid Balut)
- https://www.peerlyst.com/posts/hiring-your-first-security-professional-dawid-balut
How to Start a Career in Cyber security
- https://www.concise-courses.com/security/how-to-start-your-career/
How to Get Into Information Security (ISC^2)
https://www.isc2.org/how-to-get-into-information-security.aspx

Android RE using Frida

I figured that I would write down my findings somewhere since this is my first time using Frida. This won't cover installing frida, adb, apktool because these are well covered in other sources.


	import re, urllib

	PAT = re.compile(ur'(?i)\b((?:https?://\|www\d{0,3}[.]\|[a-z0-9.\-]+[.][a-z]{2,4}/)(?:[^\s()<>]+\|\(([^\s()<>]+\|(\([^\s()<>]+\)))\))+(?:\(([^\s()<>]+\|(\([^\s()<>]+\)))\)\|[^\s`!()\[\]{};:\'".,<>?\xab\xbb\u201c\u201d\u2018\u2019]))')

	for line in urllib.urlopen("http://daringfireball.net/misc/2010/07/url-matching-regex-test-data.text"):
	print [ mgroups[0] for mgroups in PAT.findall(line) ]

	import android.content.Context;
	import android.content.pm.PackageInfo;
	import android.content.pm.PackageManager;
	import android.content.pm.PackageManager.NameNotFoundException;
	import android.content.pm.Signature;

	public class TamperCheck {

	//we store the hash of the signture for a little more protection
	private static final String APP_SIGNATURE = "1038C0E34658923C4192E61B16846";

	import SimpleHTTPServer
	class CORSHTTPRequestHandler(SimpleHTTPServer.SimpleHTTPRequestHandler):
	def send_head(self):
	"""Common code for GET and HEAD commands.

	This sends the response code and MIME headers.

	Return value is either a file object (which has to be copied
	to the outputfile by the caller unless the command was HEAD,
	and must be closed by the caller under all circumstances), or

	'use strict';

	var TrustManager;
	var manager;

	Java.perform(function () {
	var X509TrustManager = Java.use('javax.net.ssl.X509TrustManager');

	TrustManager = Java.registerClass({
	name: 'com.example.TrustManager',

	#!/usr/bin/env python
	# Reflects the requests from HTTP methods GET, POST, PUT, and DELETE
	# Written by Nathan Hamiel (2010)

	from BaseHTTPServer import HTTPServer, BaseHTTPRequestHandler
	from optparse import OptionParser

	class RequestHandler(BaseHTTPRequestHandler):

	def do_GET(self):

Ajin Abraham ajinabraham

Android RE using Frida

Tools

Injecting Frida gadget into APKs