Reverse with me - Qardio necromancy - pt 2
Frida failed, so I sniffed the air. The QardioBase2 hides raw data in a binary labyrinth but leaves the master key under the mat: plain text JSON measurement...
Recent Posts
Reverse with me - Qardio necromancy
The Qardio app is gone, leaving the QardioBase2 scale a “zombie.” Follow my journey through iOS BLE logs, GATT discovery, and broken WiFi backends to bring t...
Bypassing MFA with Reverse Proxies: Building a Rust-based Firefox Extension to Kill AitM Phishing
MFA is not enough. Discover Electric Eye: a Rust-powered Firefox extension that detects AitM proxies and Reverse Proxies in real-time by sniffing DOM leaks a...
Hardening macOS 5: Secure Email Clients, Providers, and Encryption Tools
Is email privacy a myth? From PGP and SMTP risks to why Italy’s PEC is just security landscape. A cynical guide to choosing the right providers, clients, and...
Starkiller Phishing Kit: Why MFA Fails Against Real-Time Reverse Proxies
Starkiller & AitM: Why MFA is no longer enough. Discover how real-time proxies bypass security and how to fight back with FIDO2, JA3 fingerprinting, and ...