Court of Analysis and Testing

To all of you those who are expert and have experience in android application developer you already know that There are four vital components in android application which is activities, broadcast receiver, services and content provider. All of these components is considered as IPC mechanism endpoints. What is IPC mechanism ? Okay lets take step back for a little, We all know that all android applications is run on DVM(Dalvik Virtual Machine). DVM enforce a technology what is called sandbox in order for another application cannot interfere which other. This could be see when you playing game and experienced crash in your application with various reasons or one of the reasons may be because your phone is suck :p. But after you app game is crash is not affected with the other applications. That is really cool and enforce security but what if .... another application want to interact with another applications for the sake of the functionality ? well you guess it ! the developer co...

OK recently i just discovered this really cool concept of improving coding skill by committing with #100daysofcode. The rules is very simple in the next 100 days you will: spend 1 hour or more to coding  tweet your progress daily by using #100daysofcode Each day, reach out to at least two people on Twitter who are also doing the challenge overall this is very good for people in software development industry but why people from security field never consider starting to do #100daysofpentesting or similar ?(well, there is #100dayssecurity but after read and see it i think it's not really quite what i wanted) So that my idea for this post, for the next 100 days i will do #100daysofpentesting challenge and here is the rule that i came out with: Pick two security books that you will use for pentesting guideline. Because i want to polish my skill in android pentesting i pick Android Hackers handbook and black hat python for helping me to create exploit. Well you can't...

DIZZ post dedicated for security enthusiast out there that have trouble setting up environment for their tools Are you tired for setting up the right  environment for your tools ? if(yes){ then you come to the right place }else{ well okay! you good to go lad! (ノಠ益ಠ)ノ彡┻━┻ } Recently i try to do some testing with Androguard tools for helping me with reverse engineering task for android application. The tool is super cool it allow user interactively touch the source code of the application with ipython shell, you could examine the dalvik bytecode or java source code. But like every good tools it really confusing when you try to setting up in your host, i try some source to how to set it up correctly but end with some confusing error. So i decide to find alternative ,After surfing the internet i found the one of the solution is to use "docker" engine. So what is docker engine ? To put in simple term docker is use virtualization technology like virtual ma...

Whats up guys ? Long time since i post another entry in my blog but i'm back and going to do some CTF challenge from vuln hub(link: www.vulnhub.com ) i pick the easiest one cause i'm not really that good in CTF. After a while searching for the machine that fit to my need i pick the RickdiculouslyEasy(Pun intended it !) from the description: This is a fedora server vm, created with virtualbox. It is a very simple Rick and Morty themed boot to root. There are 130 points worth of flags available (each flag has its points recorded with it), you should also get root. It's designed to be a beginner ctf, if you're new to pen testing, check it out! i download the .vbox file and run it in virtualbox. the machine is pretty neat because it is straightly show the ip address of the machine. So i don't have to bother to do ping sweep. well if you see from message it say that the admin console is in port 9090, ok so lets go to that port with web browser. type : http...