Mobile Security retweeted
Published my slides and released objection 1.7.0 which includes all of the goodies you saw in my @defcon talk today! Thanks so much for everyone that attended and all of the support along the way. You rock! 🤘
github.com/leonjza/public-ta…
github.com/sensepost/objecti…
Mobile Security retweeted
Mobile click farm, birthplace of fake engagement.
Fake impressions, boosts new social media trends, ad fraud, helps create influencers, leaves fake review, spreads likes, shares, install apps...
xitter.cf/EnglishRussia1/status/…
Mobile Security retweeted
Finally! After many months of procrastinating, RE #iOS Apps Part 2 is out! Learn how to #dump classes, #disassemble the binaries with #Hopper and modify the apps' behaviour at runtime with cycript iOS 11 edition! #security #appsec ivrodriguez.com/reverse-engi…
Mobile Security retweeted
"Ghost in the Machine: Challenges in Embedded Binary Security" youtube.com/watch?v=pMRa8xDF… great work by Jos Wetzels, @bl4ckic3! Must see!
Mobile Security retweeted
Inspired by @maddiestone I decided to try my hand at hardware reverse engineering basics: maldr0id.blogspot.com/2018/0…
Mobile Security retweeted
Just don't install them!
16 apps from Google Play right after lunch request SMS subscription payment (~$2.7+/week). Even though apps can't run in every country they still have more than 100K installs in total.
First unsubscribe then uninstall.
Mobile Security retweeted
More than 15 Guerilla Clicker Trojans discovered on @GooglePlay by @SophosLabs sophos.com/en-us/medialibrar…
Mobile Security retweeted
ROPLevel6 for ARM is now available on github.com/Billy-Ellis/Explo… As my previous tweet mentions, to complete this level you must execute a ROP chain from a fake stack on the heap using a stack pivot gadget, and call secret() with the correct parameter
Mobile Security retweeted
iBoot leaked source code is now on Github
github.com/ZioShiba/iBoot
Mobile Security retweeted
Want to read about ARM Assembly & ARM Exploitation?
mobile-security.zeef.com/ogu…
Feel free to contribute and suggest
Mobile Security retweeted
STEP-BY-STEP In-Depth TUTORIAL guide on how to perform #FIRMWARE emulation for firmware meant for other architectures.
blog.attify.com/getting-star…
#iot #pentesting #iotsecurity #mobilesecurity #firmwarere #reverseengineering #infosec
Mobile Security retweeted
Reading ProGuard's Outputs -- or, usage.txt is the exact opposite of what I thought it was. #AndroidDev jebware.com/blog/?p=484
Mobile Security retweeted
New Crucial Vulnerabilities in Apple’s bluetoothd daemon bit.ly/2rQ5wwb < iOS, webOS and tvOS vulns; great work by @raniXCH
Mobile Security retweeted
Keep up the good work @viperbjk
Very vulnerable ARM application (CTF style exploitation tutorial)
github.com/bkerler/exploit_m…
Mobile Security retweeted
Want to read about Android evasion, anti-analysis, app protection, obfuscation?
mobile-security.zeef.com/ogu…
Feel free to contribute and suggest.
Mobile Security retweeted
Finally, Azeria-Lab-VM v1 is ready for download: azeria-labs.com/arm-lab-vm/
VMware image, OS: Ubuntu, QEMU running ARMv6, ready-to-play.
Here are some root-me ARM exploitation challenges: root-me.org/?page=recherche&…
I also included a quick guide on how to get started:
Mobile Security retweeted
Slides from #r2con2017 #R2Frida (now integrated into our #MobileApp #PenTesting software) talk by @bezjaje: github.com/radareorg/r2con-2…
Mobile Security retweeted
So, that Phœnix JB writeup (From *OS Internals Vol III 1.4): newosxbook.com/files/PhJB.pd… . Questions/Comments welcome at newosxbook.com/forum