PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Tìm hiểu lỗi ứng dụng Android qua Mobisec

blog.viettelcybersecurity.com | blog | #ctf | #android | #reverse-engineering | #mobile-security | #writeup | #mobisec
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A walkthrough of Mobisec Android challenges covering app development, reversing and exploitation, including a Fortnite-style update hijack that abuses writable external storage for code execution.
Published
Collected

Related coverage

research · eshard.com
Guest article: solving a flare-on challenge with esReven
We use esReven to solve the final challenge in last year's Flare-on reverse-engineering CTF.
research · eshard.com
Hack Trick": DG'hAck CTF 2022 write-up
See esReven in action against an obfuscated malware sample. This walkthrough covers defeating anti-VM measures, analyzing DeviceIoControl calls, and patching memory to recover a corrupted registry flag.
research · eshard.com
Unfolding obfuscated code with esReverse - Part I (full write-up)
We take the Grehack 2015's challenge scoring the highest number of points over all categories (cryptography, exploit, reverse engineering, etc.) using esReven.
blog · bishopfox.com
Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications
Bishop Fox shows how to bypass .NET MAUI's platform packaging to extract readable C# assemblies from Android and iOS apps, then use that shared-assembly insight to uncover critical vulnerability patterns in common business logic.
blog · yeswehack.com
Dojo challenge #54 Highscore solution
Dojo Solution - Hacker Club: Filter bypass and JSON injection to achieve improper access
blog · projectzero.google
Hack The Galaxy: Hunting Bugs in the Samsung Galaxy S6 Edge
Project Zero researched the Samsung Galaxy S6 Edge and reported 11 high-impact security issues, discussing motivations, methodology and lessons learned from the device research.
Back