Farzan Karimi

Dropping exploit code from my DEF CON 33 talk: Recursive Request Exploits (RRE)
TL;DR: Trace API calls backward from a protected resource. If any upstream API is unauthenticated, you can bypass access to the whole chain.
github.com/jumpycastle/rr…

I built Comment Crusader, a Burp Suite extension to uncover one of the more overlooked sources of data leaks in web apps: developer comments. Will be released this month.

Enjoy a quick teaser.

Thrilled to share that my former Android Red Team has hit a major milestone with their first blog post! They detailed the exploitation of Android Binder (CVE-2023-20938), achieving root privileges on updated devices.
Read more: androidoffsec.withgoogle.com/posts/attackin…

I presented a lightning talk at Google Cloud Security Talks today focused on how our Android Red Team was able to attack modem chips to help drive important baseband mitigations in Android 12+

If you're interested in just the exploit demo, skip to 9:40
youtube.com/watch?v=BMbd2v…

I'll be presenting on the state of Pixel cellular security at Google Cloud Security Talks on Oct 25th. Please register if interested!

cloudonair.withgoogle.com/events/2023-oc…