Research & Threat Intel
Welcome to the final blog post in our series about reverse engineering iOS system libraries with radare2. This time we’ll focus on finding cross-references across different libraries present in the dyld shared library cache (or DSC if you’re into acronyms). We’ll discuss various techniques to achieve this, each with its trade-offs between performance and amount […]
Editor’s Note: Keeping up with ever-changing low-level operating system internals is no small task, especially when it comes to the iOS dyld cache, a key element that underpins how iOS apps interact with the OS layer. This post, by Francesco Tamagni, focuses on leveraging foundational pieces of radare2 to read and interpret the formats critical […]
Frida, a popular open-source project, is a dynamic instrumentation toolkit that enables developers, security researchers and reverse engineers to inject custom scripts into running processes. It allows users to perform a variety of tasks such as function hooking, API call tracing and runtime manipulation, making it a versatile tool for debugging, reverse engineering and mobile […]
NowSecure benchmark mobile application security testing reveals a staggering 95% of mobile apps fail at least one OWASP MASVS category, putting organizations at significant risk of data breaches and leaks. The OWASP Mobile Application Security Verification Standard (MASVS) sets a minimum security and privacy bar for mobile security professionals and developers to follow when building […]
Whether you’re building a mobile app from scratch or evaluating an existing app, developers will find debugging an essential skill to master. Debugging is the process of identifying and resolving errors in software systems and mobile apps. Most Integrated Development Environments (IDE) come with built-in debugging tools that enable a developer to review the inner […]
The rise of generative Artificial Intelligence (AI)-based tools has the potential to revolutionize software development. Many organizations have already embraced AI-powered coding assistants such as GitHub Copilot and ChatGPT to improve the developer experience and speed time to market. A recent McKinsey study found devs can complete coding tasks up to twice as fast with […]
“Photo by FLO:D on Unpslash https://unsplash.com/photos/yQYQJaiypZE“ Technology advancements are constantly reshaping the way we communicate and conduct business. As the CTO of NowSecure, a mobile application security testing SaaS provider, I want to discuss a topic I believe is of timely relevance: post-quantum security and in particular within the mobile application context. The cryptographic landscape is […]
Security and privacy vulnerabilities can compromise popular consumer brands.
Many mobile applications rely heavily on web technologies and resources for their functionality. For example, WebViews offer a simple and convenient way to load and display web content directly within a mobile app. However, WebViews can increase the mobile attack surface while introducing significant risk depending on their configuration. Cyberattackers can exploit Android WebViews to […]
Reverse engineering a mobile application means taking apart an Android or iOS binary to learn about its makeup. This insight makes it easier to manipulate an app in ways its developer didn’t originally intend. As a mobile pen tester, security analyst or researcher, knowing how to reverse engineer mobile apps improves the quality and depth […]