Penetrating Networks

0 %
Navid Fazle Rabbi
Sr. Security Researcher
Offensive Security Research
bKash Ltd.
Research Interest
  • 🔒 Web & Mobile AppSec
  • 💥 Side-Channel Analysis
  • 🤖 AI Attacks & AI Security
  • 🔗 Blockchain & Web3 Security
  • 🌐 Browser Security
  • 💻 Source Code Analysis
  • 🔐 Real-world Cryptograpy
  • 💣 Exploit Development
  • 🔄 Reverse Engineering
  • 🌐 IoT Security

IceWatch

Tools

Once upon a time, there was a vast organization whose operations were primarily reliant on real-time communication. Unfortunately, the organization's turn and stun server credentials were revealed to the public by mistake.

A malicious person discovered these credentials and understood he might potentially listen in on the organization's private chats. The malicious user was ecstatic at the thought of gaining access to sensitive data and prepared to carry out his nefarious activities.

The issue was promptly discovered by the organization's Red team, which is in charge of identifying and mitigating security concerns. They leapt into action right away to safeguard the organization's communication links.

The Red team promptly found that the malicious user was using the disclosed credentials and took steps to revoke access. The team also put in place additional security measures to ensure that such an incident did not happen again in the future.

With the problem rectified, the organization's employees could communicate freely and securely once more. The Red team had proven its usefulness yet again by rescuing the day and the organization's private information.

IceWatch - WebRTC Connection Checker

IceWatch is a tool for checking WebRTC connections and ensuring that credentials are not leaked.

What it does

IceWatch checks the connection setup using the provided credentials and logs the status of each connection. It creates multiple connections and logs all connected peers for analysis.

Note

Before using IceWatch, make sure to change the stun-url, username, and password fields in the code with your own credentials. 

  • Language
    Python