Ajin Abraham

Research, prototype and build security tools for fun and profit. Author: MobSF, nodejsscan. Founder: @OpenSecurity_IN, @OpSecX.

[Ajin Abraham @ajinabraham]

Video of my Hack In Paris talk, injecting Security into Web Apps at Runtime. https://t.co/Mqi8KkThWB
White paper: https://t.co/Uvxzm0206D

[Privy @privy_io]

@OpenAI 4/ Learn more about our approach to security, and how AI fits into modern defensive work ⤵️ https://t.co/6RJa4PtTzZ

[Ajin Abraham @ajinabraham]

@abb4d0n The links should be updated to allow any email domains.

[Ajin Abraham @ajinabraham]

I will be releasing the brand new MobSF iOS Dynamic Analyzer powered by Frida and @CorelliumHQ at @BlackHatEvents Arsenal, London UK.
Here is a sneak peak: https://t.co/BkWOmQTOKR
Catch me live on Thursday, December 7 1.00 PM

[Ajin Abraham @ajinabraham]

Recently did a React/Next.js secure code review. Here is a checklist that will help you spot some common vulnerabilities.

https://t.co/gKw56ssKkg

#appsec #nextjs #reactjs #codereview

[OpenSecurity @OpenSecurity_IN]

Capturing Mobile App Network Traffic with MobSF and Burp.

MobSF takes care of
* Proxy Root CA install
* Generic SSL Pinning/Certificate Transparency bypass
* Generic Root/Debugger check bypass

See Docs: https://t.co/AJuZsIMedD

[OpenSecurity @OpenSecurity_IN]

MobSF v3.6.9 is out! 🎉

The latest docker image now supports quick and easy Dynamic Analysis with Android Studio AVD, Genymotion, and Corellium Android VMs.

See the updated docs: https://t.co/AJuZsIMedD

[Maximilian Hils @maximilianhils]

No, it was not a joke. "Our paying customers need X, when will you fix it?" may not be the best way to introduce yourself to an open source project.

#TodayInOpenSource

[Arkadiy Tetelman @arkadiyt]

Excited to share that @Chime has not 1, not 2, but 3 presentations at @BSidesSF this year!

A thread 🧵

[Ajin Abraham @ajinabraham]

LambdaSpy is a neat PoC, an MITM proxy style lambda extension to intercept/modify lambda events.

The trick: Overwrite the environment variable in Rapid’s heap memory.

https://t.co/BQCvKzzV1s

https://t.co/xqYGRsli5y

Great work @clearvectorhq

[Tromzo @TromzoSecurity]

🎙️New Podcast 🎙️

How do you build a product security team?

On this week's episode, Harshil speaks with @Chime's Director of Product Security, Mukund Sarma to answer this question and many more.

Full episode here 👇 👇 👇
https://t.co/1RBpJNg09C

#appec #prodsec

[Ajin Abraham @ajinabraham]

If you are building a startup targeting India, here is your realistic market segments.

[Deedy @deedydas]

Quick guide to the India demographic 2022 –

Population: 1400m
Internet: 658m – 47%
Smartphone: 493m – 35%
Urban: 493m – 35%
Digital Payments: 260m – 18%
eCommerce: 190m – 13%
Domestic flyers /yr: 144m – 10%
Taxpayers: 60m – 4%
iPhone buyers /yr: 5m – <0.5%

In the US...

[Chris Bakke @ChrisJBakke]

The year is 2024.

You walk into your local coffee shop.

A latte costs $12.

You have the choice of tipping 75%, 95%, or 125%.

You sheepishly tap "75%" and feel bad about yourself.

The barista shakes his head in disgust.

[Bitrise @bitrise]

Testing security is crucial. 🛡 Let us walk you through the steps of setting up the #MobSF Scan tool on an #AWS EC2 machine with #Docker and Bitrise to be able to run your static analysis tests easily! ✅
https://t.co/vT7sUGzbbx

[Ajin Abraham @ajinabraham]

I learned more science from @Kurz_Gesagt than my entire schooling. This channel should be a part of school curriculums. The visuals and narration is just top notch.

[Kurzgesagt @Kurz_Gesagt]

What started as a bachelor thesis nine years ago turned into a channel with 19 Million birbs on YouTube.
Thank you for watching and sharing our content, thank you for caring.
Thank you for making this possible. 💖

[Ajin Abraham @ajinabraham]

Ready to use Go modules for concurrency limiting

Limiter, uses atomic - https://t.co/xtrhdyo3X5

Semaphore, uses semaphore and mutex - https://t.co/BybguYtpYW

[Ajin Abraham @ajinabraham]

Golang Concurrency Limit Performance Benchmark

tl;dr,

Atomic > Semaphore with WaitGroup > WaitGroup

Follow the thread for more details.
#golang #goroutine #concurrency #concurrencylimits

[Ajin Abraham @ajinabraham]

Benchmark Function

A goroutine parsing git patch from ~2000 commits in a local repo using git binary via exec.Command().

This exec call will hit a ulimit (too many open files) panic if the concurrency limits are not set.

MBP 16 inch 2019, 6 core Intel i7 2.6 GHz/32GB RAM