Bypassing Android security via backups (PSK recovery)

In my recent Android trainings and the Android security talk I gave at AppForum 2014 I was asked to provide a sort of a demo that can be easily replicated to explain the importance of maintaining a proper security posture. So I created a script that ‘recovers’ PSKs from the device and displays them.

Before moving on, a brief disclaimer: Android (or iOS, or Windows) are pretty secure, it is up to the user how much of this security is traded for convenience (or ignorance).

(more…)

Running a WLAN controller in VMWare Player

Motorola WiNG5.6 firmware images were finally posted last week, and along them, the VX9000 cloud controller DEMO image. I am very excited about it, as it allows me to run a VM version of Motorola’s top controller (or cluster, or hierarchy for that sake) right on my laptop! No need to say about potential for labs and demos this has.

In this blog I’ll review how I installed VX9000 image onto VMWare Player. Officially, VX9000 supports EXSi, Xen, Hyper-V or Amazon EC2, but for small setups something like VMWare Player or VirtualBox also works.

VX9000-GUIlogin

(more…)