@8kSec

Offensive Security Training. OnDemand Mobile Security & AI Security Courses - https://xitter.cf/t.co/B8Q31o3VXY. Linkedin: @8ksec

 United States
8ksec.io
Joined August 2022
  • Tweets693
  • Following542
  • Followers3.6K
455Media
Pinned Tweet
8kSec
@8kSecJun 24
NEW BLOG ALERT! The final part of the Android SELinux Internals series is now out on 8ksec.io/android-selinux-int…. This one covers the Treble policy split, a sesearch audit workflow, how kCFI/PAC/MTE/SCS stack up against exploit primitives, and what changed in Android 16.
1
20
69
4,273
Our blog walks through compiling the Dopamine jailbreak from source, so you can set breakpoints, inspect memory, and trace the exploit logic step-by-step yourself: 8ksec.io/compiling-dopamine-…  Covers the full setup, the real build errors you'll hit, and fixes for each. Follow @8kSec for more iOS internals research
12
41
2,491
This deep dive breaks down CVE-2023-26083, where the Mali GPU driver serialized raw kernel pointers into a timeline stream ring buffer that unprivileged apps could acquire via ioctl and read using normal read operations. KASLR bypass primitive with user-space code: 8ksec.io/cve-2023-26083-kern… Remained exploitable on Pixel 8 months after the announced patch. For researchers interested in topics like this, and our Offensive Android Internals course goes deeper into Android kernel internals, Mali GPU research, DAC/CAP/RKP/MTE, native fuzzing with Frida and AFL++, leads to the CASR certification. academy.8ksec.io/course/offe… Follow @8kSec for more Android kernel research
6
46
4,100
Learn mobile app exploitation from the people who wrote the vulnerable apps the industry trains on. 🔥 Early bird ends Aug 7 📍 Black Hat India 2026 | Oct 27–28, Bengaluru | Practical Mobile Application Exploitation by @8kSec What's covered across 2 days: - Reverse engineering iOS + Android binaries and system libraries - ARM64 instruction set: static + dynamic analysis - Exploiting IPC, insecure storage, weak cryptography - Bypassing root/jailbreak detection, SSL pinning, anti-debugging, obfuscation - Fuzzing native libraries to uncover vulnerabilities - IDA Pro, Hopper, Ghidra, Frida - Includes Corellium access and the CMSE certification. → blackhat-india.com/training-…
2
11
1,676
🚨 New Blog alert! AI-Assisted Fuzzing: Generating libFuzzer Harnesses with a Local LLM Harness-writing is the friction that kills most fuzzing efforts. In our latest blog, we use a fully offline local LLM (Ollama) to generate libFuzzer harnesses, while libFuzzer + AddressSanitizer do what they do best, which is uncover bugs! The LLM drafts. The fuzzer finds. The human verifies. Read the full blog: 8ksec.io/ai-assisted-fuzzing…  Keep learning with @8kSec. Follow us for more AI Security content.
18
1
67
4,916
With Apple's Memory Integrity Enforcement turned on, a classic iOS memory bug can't fail silently anymore. Write 2,000 bytes into a 16-byte buffer and the app crashes the instant it goes out of bounds, no quiet corruption. The blog shows how to switch it on in your own app and read the crash it produces: 8ksec.io/mie-deep-dive-enabl… The honest limit: it catches 93.75% of these bugs, not 100%. That remaining gap is where exploitation lives: heap overflows and use-after-frees under ARM64 tagged memory are core OS-level iOS work. Our Offensive Mobile Reversing and Exploitation course covers ARM64 binary exploitation and PAC/SPTM/RKP bypasses hands-on: academy.8ksec.io/course/offe… Follow @8kSec for more iOS memory-protection research.
6
49
3,836
This blog covers the defense: ARM's Memory Tagging Extension 4-bit tags on every 16-byte granule that turn heap overflows and UaF into immediate segfaults, at near-zero cost: 8ksec.io/arm64-reversing-and… Walks through IRG/STG instructions, a working demo, and enabling MTE on Pixel 8. Follow @8kSec for more ARM64 exploitation
1
4
19
1,408
MTE raises the bar for ARM64 heap exploitation, understanding how tags break overflow and UaF primitives is now part of the exploit development skillset. Our Offensive Mobile Reversing and Exploitation course covers ARM64 binary exploitation end-to-end, from ROP chains through mitigation bypasses, with hands-on labs and the OMSE certification. academy.8ksec.io/course/offe…
1
285
This blog reverse-engineers how Apple's MIE works inside the iOS 26 kernel - hardware memory tagging that mitigates buffer overflows, UaF, and type confusion with near-zero overhead: 8ksec.io/mie-deep-dive-kerne… Three pillars: type-aware allocators, Enhanced MTE with synchronous faults, and SPTM hypervisor protection that guards tag storage even with a compromised kernel. Follow @8kSec for more iOS kernel research.
1
24
100
7,184
Understanding hardware mitigations like MIE, PAC, and SPTM is essential for anyone doing iOS kernel-level security research. These are the defenses you need to map before assessing any modern Apple target. Our Offensive iOS Internals course covers iOS kernel architecture, security mitigations, and reverse engineering with Frida and Binary Ninja, leading to the CISR certification. academy.8ksec.io/course/offe…
1
515
Check out our 10-part ARM64 Reversing and Exploitation blog series where we cover heap overflows, Use-After-Free, ROP chains, shellcode, ASLR bypass, integer overflow, off-by-one, and ARM's Memory Tagging Extension. Read all the parts here: 8ksec.io/arm-64-reversing-an… Each part builds on the last. Start from Part 1. Want to dive deeper? Until tomorrow, get 25% OFF all on-demand courses at 8kSec Academy using code SUMMER25: academy.8ksec.io/
7
50
2,481
The Practical AI Security course is fully hands-on. Through 19.5 hours of video, plus practical labs, you'll learn: 𝗔𝘁𝘁𝗮𝗰𝗸 → prompt injection, LLM jailbreaks, MCP exploitation (Confused Deputy → arbitrary file access) 𝗗𝗲𝗳𝗲𝗻𝗱 → AI gateways, multi-layered guardrails, threat modeling (STRIDE, MAESTRO, MITRE ATLAS) 𝗔𝗽𝗽𝗹𝘆 → build RAG apps & agents, fine-tune LLMs (QLoRA), wire AI into security tooling It now includes module glossaries, homework, and a mock exam – and like everything else this week, it's 25% off through June 30 with code SUMMER25. academy.8ksec.io/course/prac…
1
1
6
759
☀️ SUMMER SALE at 8kSec Academy is live! 25% off every on-demand course through June 30 with Code: SUMMER25. Want to go deeper into Android internals, SELinux, Binder IPC, and more? Check out our Mobile Reversing & Exploitation (OMSE) and Android Internals (CASR) tracks. Head over to academy.8ksec.io/ now!
309
☀️ SUMMER SALE at 8kSec Academy is live! 25% off every on-demand course through June 30: → academy.8ksec.io/ Five tracks, five certifications: 𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗮𝗹 𝗔𝗜 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 (CAISR) → prompt injection, MCP exploitation, offensive AI agents 𝗠𝗼𝗯𝗶𝗹𝗲 𝗔𝗽𝗽 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝗮𝘁𝗶𝗼𝗻 (CMSE) → iOS/Android/Flutter RE, Frida, IPC 𝗠𝗼𝗯𝗶𝗹𝗲 𝗥𝗲𝘃𝗲𝗿𝘀𝗶𝗻𝗴 & 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝗮𝘁𝗶𝗼𝗻 (OMSE) → ARM64, kernel mitigations, AFL++ fuzzing 𝗶𝗢𝗦 𝗜𝗻𝘁𝗲𝗿𝗻𝗮𝗹𝘀 (CISR) → mach_msg2/XPC, jailbreak internals 𝗔𝗻𝗱𝗿𝗼𝗶𝗱 𝗜𝗻𝘁𝗲𝗿𝗻𝗮𝗹𝘀 (CASR) → Binder IPC, SELinux, Mali GPU Every course now ships with module glossaries, hands-on homework, and a full mock exam, giving you a structured path to the certification. 25% off through June 30, EST. Code: SUMMER25
1
2
658
Free, hands-on AI/LLM exploitation labs. Prompt injection, MCP path traversal, adversarial ML, data poisoning, model-file RCE. Each one of this is a purpose-built vulnerable AI app, and not a jailbreak-the-chatbot demo: academy.8ksec.io/course/ai-e… Follow @8kSec for more AI security training
5
16
912
Think about a loop that has i <= 16 instead of i < 16. That one-character bug writes one byte past the buffer, and straight onto a nearby pointer. This walkthrough turns that single byte into arbitrary code execution on ARM64: 8ksec.io/arm64-reversing-and… Follow @8kSec for more ARM64 exploitation
2
6
36
2,600
Off-by-one writes and pointer overwrite tricks like this are a core ARM64 binary exploitation primitive. Practice building these exploits yourself in our free ARM Exploitation Challenges: academy.8ksec.io/course/arm-…
362
Everyone says to add SSL pinning to your mobile apps. This blog argues on reasons to remove it: 8ksec.io/why-you-should-remo… A revoked or renewed cert bricks your app until users force-update, and Frida drops the pin in minutes anyway. The real fix moves the decision server-side. Follow @8kSec for more practical security content
1
4
18
1,044
Bypassing SSL pinning and intercepting app traffic is a core mobile pentest skill. Our Practical Mobile Application Exploitation course covers Frida instrumentation, runtime manipulation, and traffic interception on real iOS and Android apps, leading to the CMSE certification. academy.8ksec.io/course/prac…
2
432
Twelve free iOS application exploitation labs. Frida detection, runtime swizzling, GPS spoofing, SSL bypass. Built like real hardened apps, not toy CTFs: academy.8ksec.io/course/ios-… Follow @8kSec for more mobile pentest training
1
23
1,151
Load more