Posts tagged 'Tool'

byt3bl33d3r

Toby: finding the needle in the haystack

When I successfully extract a file system from the firmware of an embedded system, the first thing that I do is run grep or strings looking for low hanging fruit or even potential command injection vulns.

What I wanted though is something that recursively checked all files of a directory …

byt3bl33d3r

Pyexfil - Using Python to make Gmail a C&C server

Now I'm pretty sure there was a talk at BlackHat a couple of years ago about doing this, so this might not be anything new but I'll write about it anyway.

This is a great way to exfiltrate data from a network: it's stealthy (who looks at traffic going to …