Attacking Android Applications With Debuggers

This iOS tutorial automates heap dumping: after decrypting the binary with Clutch and running class-dump-z, generated Cycript scripts pull targeted properties and instance variables from memory.

Covers Linux function hooking via the dynamic loader API and LD_PRELOAD to wrap library calls at runtime — an easier alternative to GDB for monitoring crypto calls, file I/O, and network traffic.

Bishop Fox shows how to bypass .NET MAUI's platform packaging to extract readable C# assemblies from Android and iOS apps, then use that shared-assembly insight to uncover critical vulnerability patterns in common business logic.

Alex Groce explains test-case reduction: shrinking failing inputs with tools like the DeepState reducer to speed debugging and cut test overhead, plus six reducers worth knowing.

HackerOne surveys tools for detecting memory leaks in C++ applications, covering Valgrind Memcheck and AddressSanitizer, and how each pinpoints leaks with stack traces and allocation details.

Using the Qiling framework to emulate a UEFI PNG decoder, researchers found a buffer over-read from spoofed IDAT chunk lengths, a LogoFail-adjacent flaw leaking data during boot.