Char49 at DEF CON 2024: Unveiling Vulnerabilities in Car Manufacturers' Applications

DEF CON is one of the largest and most important conferences in the world of cybersecurity, bringing together experts and professionals from across the globe to discuss the latest discoveries and threats. This year, Char49 had the honor of participating at AppSec Village with an innovative talk on the security of car manufacturers' applications, presented by our experts David Sopas and Paulo Silva.

Misconfiguration in a bottle: Symfony Profiler exposed

Char49 recently discovered a security misconfiguration on a subdomain of an American multinational corporation (Top50 on the Fortune500) website: an exposed Symfony web framework debug endpoint leaking sensitive information.

In a nutshell, exposing Symfony Profile or any other web framework debug...

Amazing November!

Photography by @Women4Cyber

If October was exciting, November was really amazing! Why? No, it wasn't for the colder and rainy days, not even for the roasted chestnuts or the delicious autumn oven meals.

First, Paulo Silva on November 9th took part at OWASP Lisboa Chapter meetup in a talk named...