Pinned Tweet
my first post on @hackernoon get more reading time than Medium one (100 views vs 1k6) 😂, more to come soon
hackernoon.com/bypassing-ssl…
#iOSSecurity #MobileSecurity
ReverseThatApp retweeted
Here's the fourth part of my blog series on Compiler and LLVM internals. Co-authored with @0xP0ch1ta
This blog provides a basic introduction to Machine IR, followed by an in-depth explanation of how to write and run an LLVM Machine Function Pass.
Key concepts covered:
1. Machine IR
2. Machine Basic Blocks
3. MachineModuleInfo
4. Target, TargetRegistry and TargetMachine.
5. MIR Parser
sh4dy.com/2026/10/04/learnin…
ReverseThatApp retweeted
Exploiting Reversing (ER) Series | Article 10: iOS Security Research (part 01)
223 pages, free. The first article in the series aimed at iOS itself, and the opening of a multi-part sequence.
Published on:
blackstormsecurity.com/resea…
This article will be published on exploitreversing.com/ next week.
I would like to thank Ilfak Guilfanov (@ilfak) and Hex-Rays SA (@HexRaysSA) for the continuous support.
Hope you enjoy the read!
#iOS #Apple #VulnerabilityResearch #ExploitDevelopment #ReverseEngineering
Over 90 binary exploitation challenges with detailed writeups. From your first buffer overflow to House of Orange. All free. All open source tools.
Assembly fundamentals. Ghidra. GDB. pwntools. Stack overflows through every mitigation bypass: ASLR, PIE, NX, canaries, RELRO. ROP chains: static, dynamic, ret2csu, SROP, stack pivoting, partial overwrites. Format strings. Shellcoding.
Then heap exploitation: double frees, use-after-frees, heap grooming, fastbin attacks, tcache poisoning, unsorted bin attacks, large bin attacks, unlink exploitation. House of Spirit. House of Lore. House of Force. House of Einherjar. House of Orange.
Integer exploitation. FILE exploitation. Obfuscation and MOVfuscation. Custom architectures. Z3 and angr for symbolic execution. Automatic exploit generation.
Every challenge has a writeup walking you from being handed the binary to writing the exploit. No IDA license needed.
If you are learning binary exploitation, this is one of the most complete free courses that exists.
guyinatuxedo.github.io/
Author: guyinatuxedo
Demo Reference: pwndbg.re/stable/
#ExploitDevelopment #ReverseEngineering #InfoSec
ReverseThatApp retweeted
As promised, DarkSword Kernel Exploit writeup is now live at therealclarity.github.io/blo…
This goes over the root cause, what happens on the Kernel side and how the kernel exploit is implemented.
Hope it helps anyone looking to understand it! :)
ReverseThatApp retweeted
#deepsec "A Journey to Break Apple's PPL". PPL's been the kernel's last line of defense on A12+ for years, and it's held up. @pattern_F_ shares two ways through — and maybe one opens the door to an iOS 26 jailbreak…? 🙊 deepsec.cc/202607/speaker-pa…
CSCG 2026 is live (until 01.05.)! 🥳
Jump in, solve challenges, learn something new, and climb the scoreboard.
This year CSCG also serves as the OpenECSC for ECSC 2026 Germany. @ECSC_openECSC
play.cscg.live/
ReverseThatApp retweeted
A three part blog series by @jack_halon provides a great introduction into v8 and JS internals, compilation pipeline and ends with analyzing and exploiting CVE-2018-17463 a JIT vulnerability in Turbofan:
jhalon.github.io/chrome-brow…
jhalon.github.io/chrome-brow…
jhalon.github.io/chrome-brow…
ReverseThatApp retweeted
Get your macOS 26.0 xnu CodeQL database (and compile_commands.json) here! 👩
github.com/blacktop/darwin-x…
After hours of Flutter AOT reversing, Dart object pool decoding & AES key derivation tracing, I became the first globally to crack DroidPass
Full write-up reversethat.app/reverse-engi…
#Android #AndroidSecurity #ReverseEngineering #CTF #Flutter #Dart #8ksec #DroidPass
Nobody’s cracked this Android lab yet 🤯
Meet DroidPass: Ultimate Password Vault, a purposely flawed password manager hiding its base encryption key inside the APK. Your mission: statically reverse-engineer the app and extract the exact base key used to encrypt the password DB.
Think you can be the first to break it? Drop a comment if you’re in. Winner gets ultimate bragging rights🔥
🔗 academy.8ksec.io/course/andr…
#MobileSecurity #ReverseEngineering #AndroidSecurity #CTF
Just published my #flareon12 challenge 8 write-up
Spent hours playing with Intel Pin (wrong path 😅), then switched to a bottom-up event-based approach using WinDbg TTD, x64dbg, ret-sync & IDA — felt like cracking old game trial licenses again 😄
🔗 reversethat.app/posts/flareo…
ReverseThatApp retweeted
When static analysis hits a wall, dynamic tracing with Frida’s Stalker API reveals what’s really happening at runtime.
Learn to trace ARM instructions, filter for ldr/str, and see how obfuscated apps manipulate data:
🔗 8ksec.io/advanced-frida-usag…
#ReverseEngineering #AndroidSecurity #iOSSecurity #DynamicAnalysis #Obfuscation #MalwareAnalysis
ReverseThatApp retweeted
Tried out Harmony for the first time. It’s super handy for reverse engineering obfuscated C# binaries, especially when it comes to automation. I used to struggle automating steps in dnSpy, but Harmony made it seamless. Checkout my writeup on Securinets CTF kos0ng.gitbook.io/ctfs/write…
Really enjoyed #flareon12 — especially challenges 7, 8, and the brutal but fun final challenge (9). 🧠🔥
Thanks to @Mandiant for another amazing RE CTF.
#CTF #ReverseEngineering #CyberSecurity
ReverseThatApp retweeted
We present appledb_rs, an open-source tool to analyze Apple IPSWs without storing full images. Extraction, indexing, API, and web interface to speed up your security research 🔍
🔗 Full article available here: synacktiv.com/en/publication…
📂 Source code: github.com/synacktiv/appledb…
ReverseThatApp retweeted
#flareon12 pre-register now at flare-on12.ctfd.io The puzzles are unleashed tomorrow.
ReverseThatApp retweeted
Community Write-Ups from 8kSec Mobile Security Battlegrounds
Our free Mobile Security Labs have inspired some excellent technical deep dives. Below is a running list of community write-ups that detail their techniques, tooling, and exploitation steps.
🤖Android Labs
@f0rk3b0mb – f0rk3b0mb.github.io/p/8ksec_… - Challenges covered: AndroPseudoProtect, AndroDialer, DroidCave, DroidView, DroidWars, ReconDroid.
@lautarovculic – Android Labs write-ups:
ReconDroid: lautarovculic.github.io/writ…
GeofenceGamble: lautarovculic.github.io/writ…
FactsDroid: lautarovculic.github.io/writ…
DroidWars: lautarovculic.github.io/writ…
DroidView: lautarovculic.github.io/writ…
DroidCave: lautarovculic.github.io/writ…
BorderDroid: lautarovculic.github.io/writ…
AndroPseudoProtect: lautarovculic.github.io/writ…
AndroDialer: lautarovculic.github.io/writ…
Shuiboye Blog:
BorderDroid: shuiboye.blogspot.com/2025/0…
DroidView: shuiboye.blogspot.com/2025/0…
🍏iOS:
@n0ps3 – FridaInTheMiddle (iOS Lab) Solution: n0psn0ps.github.io/2025/07/1…
@ReverseThatApp – FreeFallGame (Reverse engineering an iOS Flutter game): reversethat.app/reverse-engi…
⚙️Arm64
@karmaz95 – Use After Free — Callback to Shell Lab Solution and additional ARM64 references: patreon.com/posts/arm64-refe…
We thank you all for sharing your insights and creating these valuable references for anyone looking to sharpen their mobile security skills!
Want to try the labs yourself? All challenges are free: 8ksec.io/battle
#MobileSecurity #ReverseEngineering #ExploitDevelopment #iOSSecurity #AndroidSecurity #ARM64
ReverseThatApp retweeted
FLARE-On 12 is about to blow up your weekends: security.googlecloudcommunit… #flareon12
ReverseThatApp retweeted
The 12th Annual Flare-On Challenge kicks off Sept 26 at 8PM EST!
Reverse engineering pros, from Windows to Web3 (with a YARA twist), it's your time to shine. 🏆
Get ready → bit.ly/4ofb5g8
#FlareOn12


























