Cybersecurity

Shannon Autonomous Pentester

Shannon adalah perangkat lunak pentester berbasis Artificial Intelligence.

Fitur utama:

  • Beroperasi secara otonom, tidak perlu manual
  • Laporan pentester dengan exploit yang dapat direproduksi
  • Critical OWASP Vulnerability Coverage
  • Code-Aware Dynamic Testing
  • Powered by Integrated Security Tools
  • Parallel Processing for Faster Results

alt Shannon Screen

Sumber: #

Headphone Hijacking

Kutipan dari twitter tentang masalah keamanan di headphone wireless. Salah satu masalah wireless adalah keamanan data. Kalau mau 100% aman memang lebih baik pakai headphone kabel saja.

Just saw a sick live demo of wireless headphone hijacking that allows the attacker to perform the following without ever pairing the device. All the attacker has to do is be in range.

  • read/write arbitrary bytes to device
  • read headphones information
  • dump firmware info
  • extract paired devices information (name, link key, MAC address)

and since you can extract the above information, the attacker can then impersonate as the device and perform actions like