Chirashi Security
BlackBerry
Puttering around with BlackBerry forensics — Part 2
Okay then. It apparently takes me a while between posts. I’ve been keeping a bit busy with several projects and it has been difficult to find the time to conduct much research or write blog posts. I do have an upcoming white-paper that I will release somewhere in November. It includes source code to the toolkit that [...]
Puttering around with BlackBerry forensics — Part 1
I’m guilty of sitting on source code which I should have released a long time ago. I make excuses to myself that I didn’t release any of it because I was waiting for someone to come along and prove to me that there was a better way of doing things. I guess the bottom line [...]
Comparing JTR compiled on GCC and Clang
I bought the new XCode 4 recently and it is a pretty awesome IDE. I only recently got into Objective-C coding, but I have VERY quickly fallen in love with the language and the IDE. I generally regarded my language of choice to be Java and my all time favorite IDE has been Eclipse, but [...]
Everything can be reversed. Everything.
I recently started reverse engineering BlackBerry applications. I have done it before, but this time around, I focused a lot more effort and energy on it. In short, BlackBerry apps can be decompiled; enough to the point where you can begin to write keygens for them. Yes, much like back in the good old days. [...]
You want the BlackBerry Event Log? beg damnit!
It’s been quite a while since my last post. I’ve been a bit on the busy side with work, family and a bit of research. Inspired by a friend and fellow researcher – Cst. Shafik Punja, I decided to look deeper into BlackBerry connectivity via USB. If I succeeded at understanding this topic, I would [...]
Data exfiltration via email
In an older version of my Bugs program, I used to forward a copy of all the user’s emails, whether inbound or outbound, to an address of my choosing. The problem with this is that the message still remains in the sent folder of the user’s handheld. Using email to exfiltrate data from a BlackBerry [...]
InputStream to ByteArray on a BlackBerry
A quick and easy method to read an InputStream to a byte array is available in the IOUtilities class of the BlackBerry API. I didn’t check if this is available pre 4.6 or not, but it does exist in 4.6 To read an InputStream directly to a byte array you can do something like this: [...]
RIM says “Would you like a password hint?”
It would appear that RIM is planning to provide end-users with a mechanism to remember their passwords. According to patent application 20090307498, RIM proposes to allow a user to store his password with unique version data to help him remember it later. As per the patent application, the version data will be in the form [...]
App World Dynamic Licensing HOWTO
I started releasing commercial applications on BlackBerry App World and yesterday was the first time I used the Dynamic Licensing model. I devised a quick solution for working with Dynamic Licensing based on Google App Engine and this post shows how this can be achieved and also includes sample source code for other developers in [...]
Emulating the BlackBerry Phone Call Log Field
While writing an application for the BlackBerry, I wanted to emulate the layout of the Phone Log. Typically, this looks like a set of rows laid out in a two-column or multi-column format. Since there was no available field to achieve this, I had to write my own. The way I did it was to [...]
© 2012 Chirashi Security. All Rights Reserved.
Powered by WordPress. Designed by 