Research & Threat Intel
Introduction One of the core designs of the Android operating system’s sandbox is to assign different applications a unique user identifier (UID). By doing this, Android reuses the underlying Linux kernel and filesystem properties to enforce boundaries. There are certain situations where apps may share the same UID, but that requires they be signed with […]
A security researcher’s tips for using JavaScript for reverse-engineering.
We examine a security vulnerability of Samsung devices.
We examine vulnerabilities that allow attackers to execute code remotely on an Android userUs device.
The convenience of Instant Apps is appealing, but attackers will view it as a shiny new attack vector, and for me the security jury is still out.
In this post I explain step-by-step how I solved the OWASP Mobile Security Testing Guide (MSTG) Crackme Level 1 using Frida (and how I then automated it).
This article will show you step by step how to obtain, decrypt and extract a binary version of the iOS kernel
NowSecure Researcher Francesco Tamagni recently made significant improvements to R2Frida’s memory-search capabilities, and he answered some questions about those updates and how they make R2Frida (an integration of the Frida and Radare open-source tools/frameworks) even better.
A detailed HOWTO of getting ‘sys_call_table’ on an Android device.