Knowing your vulnerabilities and how attackers might exploit them provides tremendous insight that you can use to improve your security posture

Mobile App Pen Testing

Our mobile application security testing will find vulnerabilities, prioritise them, and recommend remedial actions, helping you to define and mitigate your risks. We are working on 02 well-known mobile operating…

More

Web App Pen Testing

After scanning applications with automated technologies first to ensure consistent results, we follow up with manual web application pen test services to identify all vulnerabilities that can’t be found through…

More

Smart Contract Audit

Smart contract audit includes automatic and manual tests. Automatic audit aims to find commonly encountered security vulnerabilities; manual test outlines efficiency, logical, and optimization improvements. A smart contract audit is…

More

We are not a company, we are a team working together as a freelancer to make things more secure

Kubertu Labs is created for all cyber security engineers having a flat place where people can learn and share their solid knowledge regarding security , hacking. Having many valuable reports, research papers, top #10 team at Capture the Coin CTF (Defcon 2019) and other interesting activities, products made by those…

More

Our security plans which aim to serve for community use

Understand Solidity Storage in depth

Andump (Dump sensitive info)

Mobipika Scanning Tool

These are our security research papers, CVE and other findings regarding security perspectives

Thinking about Requests

Sep 17 , 2019 enderphan

The reason I want to wrap up this topic is just to keep all of my logics and comprehension of request in pen testing, hacking. Why it’s important? Rather than…

Android App – Local Attack

Sep 16 , 2019 enderphan

If you have read the "Thinking about request" article. This would be much more relevant. Previously, I had made a video about gaming attack to get to the top 1st…

Capture The Coin Write-up

Sep 9 , 2019 enderphan

Result ‌ My team: Kubertu stayed at top #6‌ My personal work stayed at top #10 ‌Read more: https://enderspub.e-cyber.ee/capture-the-coin-writeup ‌

CVE-2019-11384

May 24 , 2019 enderphan

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11384 Author: Ender Phan Description: The Zalora application 6.15.1 for Android stores confidential information insecurely on the system (i.e. plain text), which allows a non-root user to find out the…

CVE-2019-11383

May 24 , 2019 enderphan

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11383 Author: Ender Phan Description: An issue was discovered in the Medha WiFi FTP Server application 1.8.3 for Android. An attacker can read the username/password of a valid user…

Crypto Wallet Local Storage Attack

May 22 , 2019 enderphan

‌PDF: https://www.exploit-db.com/docs/46466 Background During our mobile security pen testing, we have found a very interesting attack scenario in (Android application). The attack can lead the user to unknown changes contents…