Lior Keshet
@LiorKesh
Followers
243
Following
94
Media
0
Statuses
105
Security researcher by day. Bug hunter by night.
Joined May 2013
We broke commercial root detection in Android apps 🔓📲. We targeted sensitive apps - finance, security, government - which use commercial protections. We got them running on rooted devices. That gave us full control to modify app behavior however we wanted. 👇.
2
8
20
Finally, we built a persistent module, and got the apps cleanly running on the rooted device across reboots, updates, reinstalls - no adb needed. Read the full writeup here -
lucidbitlabs.com
We bypassed leading Android root-detection SDKs and show what that means for banking, government-ID and anti-fraud apps running on rooted devices.
0
6
11
We reverse-engineered the apps, bypassing anti research protections. We pinpointed critical 'decision points' in which the app determines whether its safe to run or not. By hooking these points, we got the apps running happily on rooted devices.
1
2
4
Security critical apps often rely on Runtime Application Self Protection (RASP) to block execution on rooted devices and prevent tampering. Otherwise, attackers can:.- Fake location and/or movement.- Bypass usage restrictions.- Run apps on malware-infected devices.
1
0
2
At @LucidBitLabs, we broke commercial root detection in apps with top-tier app protections in place (RASP). Full write up -
lucidbitlabs.com
We bypassed leading Android root-detection SDKs and show what that means for banking, government-ID and anti-fraud apps running on rooted devices.
0
4
5
RT @Morpheus______: "DisARMing" code - an exploration into systems programming, #debugging & #reverseEngineering on #Linux/#Android/#Darwin….
0
55
0
RT @Nethanella: New attack MO for #Android #Malware #Banker abusing #WebView to attack any #Bank with no special permission need 🤯.Amazing….
ibm.com
Leverage educational content like blogs, articles, videos, courses, reports and more, crafted by IBM experts, on emerging security and identity technologies.
0
12
0
RT @NovoShield_Pro: NAVY FEDERAL CREDIT UNION SITE PHISHED.#novoShield's @LiorKeshet detected & reported - today - a phishing site hosted o….
0
1
0
RT @orsafr: Finally, The blog is out, proving that when it comes to cloud security, MFA is not a silver bullet. Technical Deep Dive: Vulner….
proofpoint.com
Discover how attackers bypass MFA in Office 365 by acting on behalf of an account holder. Learn about MFA bypass attacks and how to protect yourself against them.
0
1
0
RT @iCyberFighter: Sending a shoutout to the awesome reverse engineer who dissected #goznym when it emerged. His name is .@LiorKesh and I m….
0
1
0
RT @iCyberFighter: #GozNym Closure Comes in the Shape of a Europol and DOJ Arrest Operation: | #cybercrime.
ibm.com
Leverage educational content like blogs, articles, videos, courses, reports and more, crafted by IBM experts, on emerging security and identity technologies.
0
2
0
RT @BlueHatIL: The wait is over! Registration & schedule for #BlueHatIL 2019 are now live. Places are limited, register today! https://t.co….
0
37
0