I took the recently leaked git repos from of Hacking Team from GitHub and ran them through a couple of static code analysis tools.
Manual analysis has successfully unfolded a few 0days. Hopefully these results may assist further research.
Month: July 2015
We’re Here to Make Things Secure
While Hacking Team was cleaning up the mess, security professionals were raging on Twitter. The company was publicly shamed for its bad passwords, worse reaction and questionable business practices on social media.
But was it really necessary to post random screenshots of private emails from the 400 Gb pack, totally out of context? Or mock HT employees because of something they already knew? Dumping their source code on GitHub?
Thoughts on the recent breach at Hacking Team, privacy and responsible behavior of security professionals