@IncludeSecurity

Simply stated: Give us any kind of app and we'll hack it better than the rest. Our clients include awesome tech companies in Silicon Valley, NYC, and beyond.

 Brooklyn and the world
includesecurity.com
Joined May 2012
  • Tweets209
  • Following1
  • Followers1.6K
We've been doing 10x more IoT/HW hacks this year vs. previous years. One of our consultants recently spoke at WiSec'21 with his academic research team on "Issues with Indefinite Trust in Bluetooth" We summarized key points from the conf paper here: blog.includesecurity.com/202…
1
Today we're publishing our new research into hacking @unity3d Unity games. Today AssetBundles are considered dangerous. We walk through all the ways one might abuse them to get Remote Code Execution attacks on game developer (and sometimes a game itself) blog.includesecurity.com/202…
2
1
22
New research post up, turns out you can exploit dependency confusion in all sorts of scenarios for RCE. In this case this is how our team did it against Unity game developers. DevOps: Make sure to update your private registries to close this blog.includesecurity.com/202…
11
16
We're always hacking new types of apps for our clients. So we thought we'd write up a quick setup guide for those looking to pentest Roku apps (aka Channels) blog.includesecurity.com/202…
1
6
Song of the day: Heartbeat - Childish Gambino youtube.com/watch?v=uGGIrvWI… This one goes out to you OpenSSL devs.
Load more