Kostas Ereksonas

Security assessment of Besder 6024PB-501XMA IP Camera, which include static analysis of a NETSurveillanceWEB control panel and a couple of publicly available CVEs that affect this device - CVE-2025-65856 and CVE-2024-3765. Full writeup is also available: medium.com/@k.ereksonas/secu…

From Game Reverse Engineering to IoT Security — Kostas Ereksonas’s Developer Journey { by @CoderLegion1 } from @CoderLegion1 #devjourney #cybersecurity #iot coderlegion.com/30292

🚀 Check out my latest write-up on CoderLegion: "Analyzing TP-Link Tapo Protocol Using Wireshark" Read the full article here: coderlegion.com/30079/analyz… #DevCommunity #Tech

🚀 Check out my CoderLegion profile & latest post! 🏆 Points: 777 | 🎱 Badges: 8 | 👥 Followers: 7 | 📄 Posts: 2 Latest post: "Perenio Peifc01 IP Camera and Android Application Analysis" Read it here: coderlegion.com/28970/pereni… View my full profile: coderlegion.com/user/Kostas+…

Attempt at Exploratory Data Analysis (EDA) of CSE-CIC-IDS2018 network intrusion dataset. It covers: 1. Removing duplicates and rows with Nan/Inf columns 2. Addressing data variance and correlation 3. Ranking features by importance using XGBoost Read more: github.com/KostasEreksonas/N…

Security analysis of Perenio Peifc01 IP camera: 1. Dynamic analysis of crypto routines of Perenio Android app with Frida + JS 2. Crafting HTTP requests with Python 3. Video/audio stream reconstruction from RTP over UDP packets, captured with Wireshark github.com/KostasEreksonas/p…

A Wireshark dissector (written in Lua) for DVRIP/Sofia protocol found on Xiongmai based IP cameras. Includes documentation about reverse engineered parts of the network protocol as well. #Cyber #CyberSecurity #InfoSec #DVRIP #Sofia #Xiongmai github.com/KostasEreksonas/D…

Reverse engineering HTTP request signing and unique termID building in TP-Link Tapo app. Writeup includes: 1. Static APK analysis with JADX 2. Dynamic analysis with Frida 3. Runtime tracing of Java cryptographic APIs 4. App-to-cloud traffic analysis kostasereksonas.medium.com/a…

Reverse engineering HTTP request signing and unique termID building in TP-Link Tapo app. Writeup includes: 1. Static APK analysis with JADX 2. Dynamic analysis with Frida 3. Runtime tracing of Java cryptographic APIs 4. App-to-cloud traffic analysis github.com/KostasEreksonas/T…

Cryptographic method enumeration Enumerate methods of cryptography / encoding related Java classes in Android application and list all available overloads for given methods. codeshare.frida.re/@KostasEr…

Wireshark Dissector for TP-Link Smart Home System and Device Discovery Protocols. The article covers: 1. Understanding TP-Link device discovery protocols. 2.️ Developing custom Wireshark dissector and parsing packets of a proprietary network protocol. dev.to/kostasereksonas/wires…

I just published a new article - "Wireshark Dissector for TP-Link Smart Home System and Device Discovery Protocols". It covers reverse engineering application layer network protocols, Lua programming, parsing network packets and researching IoT devices. infosecwriteups.com/wireshar…

In this article on analyzing HTTP/S traffic of a mobile Android application I try to explain subjects like how to inject Burp's CA certificate into Android System Trust Store, bypass SSL pinning using objection toolkit for Frida and intercept HTTPS traffic medium.com/meetcyber/analyzi…

"DVRIP/Sofia Protocol Dissector for Wireshark (Written in Lua)" by Kostas Ereksonas #DEVCommunity dev.to/kostasereksonas/dvrip…

Approximately 95% of all web traffic is encrypted using HTTPS. However, if secure session keys are stolen, confidential information can be leaked. SSLKEYLOGFILE environment variable can be leveraged to leak session secrets. #Cyber #CyberSecurity #InfoSec kostasereksonas.medium.com/d…