Dutch

English

Talk to an Expert

Websec / Blog
Securing Today. Tomorrow could be too late.

Join us as we explore the ever-evolving world of cyber threats and arm yourself with knowledge to defend against potential breaches.

Get Consultation

Discover whats new

Breaking Roulette Royale, Part 2: the RabbitMQ broker and the account IDORs

English, DutchSeven server side findings. One hardcoded passcode opens the RabbitMQ broker behind every table, and a missing ownership check exposes any account's email, balance and avatar. Reported, no reply.

androidapi-securityidor

Breaking Roulette Royale, Part 1: reversing the APK and breaking the economy

English, DutchRoulette Royale has over 10 million downloads and lets the client decide how rich you are. We patched the APK for top VIP and every paid unlock, then used Frida to see the server ship its paywall.

androidreverse-engineeringmobile-security

CVE-2026-31431, Linux algif_aead page-cache write to root

English, DutchCVE-2026-31431 is a high severity Linux kernel flaw in algif_aead that can let an unprivileged local user gain root via AF_ALG and splice.

cve-2026-31431rce

Mobile pentesting series part 2: reversing Android application

EnglishYou may be curious, as a penetration tester, as to how a particular app feature operates or what library it utilizes. Otherwise, you may be interested in the underlying architectures or components of

Posted 19 January, 24

cover image for article

Mobile Pentesting Series - part 1: bypass SSL pinning in Android

EnglishThe purpose of this article is to demonstrate how to circumvent SSL pinning on Android.

Posted 27 October, 23

cover image for article

STUN Protocol IP Exposure Tool by WebSec

EnglishThe STUN Interception Tool is a powerful tool designed to leverage the principles of STUN. Learn more about its features and how to use it effectively.

Posted 11 September, 23

cover image for article

YARA rules Part 2: Using modules

EnglishLet's continue our acquaintance with YARA rules

Posted 22 June, 23

cover image for article

YARA Part 1: Malware analysis for detecting IOC's

EnglishYara is an instrument used to assist malware researchers in the identification and classification of malware samples.

Posted 22 June, 23

cover image for article

Security Development & Management: Jobs, Roles, & Responsibilities

EnglishSecurity Development & Management jobs are crucial to maintaining structure and a seamless security process in an organization. Learn more about these roles.

Posted 06 June, 23

cover image for article

Defensive Security: Jobs, Roles, & Responsibilities

EnglishExplore defensive security jobs like SOC Analysts & Incident Responders, their responsibilities, and the tools used to protect your company against cyber threats.

Posted 06 June, 23

cover image for article

Offensive Security: Job Titles, Roles, and Responsibilities

EnglishOffensive security covers different jobs that proactively identify and mitigate security vulnerabilities. Learn more about offensive cybersecurity here.

Posted 06 June, 23

cover image for article

Need Security?

Are you really sure your organization is secure?

At WebSec we help you answer this question by performing advanced security assessments.

Want to know more? Schedule a call with one of our experts.

Schedule a call