Catégorie : Uncategorized

  • Googled Codex, got mp3 malware instead.

    Googled Codex, got mp3 malware instead.

    A Sunday morning, a friend, and a mp3 malware file I was pouring my first coffee of the morning this Sunday when my phone buzzed. A friend had sent me a screenshot with a message that went something like: « I think I ran malware but Windows Defender blocked it… am I good? » if it happens…

  • The vulnerability that killed FreeWifi_Secure

    The vulnerability that killed FreeWifi_Secure

    TL;DR While experimenting with the Evil-M5Project near my own Freebox and smartphone, I stumbled across a vulnerability in FreeWifi_Secure. It turns out that the Free Mobile subscriber devices that leak their IMSI in cleartext during EAP-SIM authentication. This means that anyone within Wi-Fi range could passively capture the IMSI of Free Mobile users. No RCE,…