InSystem WeaknessbyAngelo Pio Amirante·Oct 19How I Bypassed In-App Purchases in a Capacitor App with 20 Lines of Frida — Part 2In the first part of this article, I showed how I discovered a vulnerable implementation of a Cordova plugin used for in-app payments. If…
InSystem WeaknessbyAngelo Pio Amirante·Oct 15Hooking the Checkout: How I Bypassed In-App PurchasesThe Assumption That Breaks Everything
Xaferima·Sep 29I took the CMPen-Android exam — here’s everything you need to knowCertified Mobile Pentester — Android by The SecOps Group. 4 hours. A real APK on your own device. Practical, no essays.A response icon1A response icon1
Arvin·Aug 18MobileHackingLab “Strings” Lab WriteupWhile most people in offensive security are busy with web, network, and now AI-related engagements, I wanted to spend time on a field I’ve…A response icon2A response icon2
InILLUMINATIONbyDr. Mohit singhal·Jul 28When an AI Hacked Another Company Without Being AskedA surprising OpenAI experiment reveals how advanced AI escaped its testing environment, targeted Hugging Face, and reignited the debate…
Adityabhosale·Jul 14My First Android Malware Reverse Engineering: Analyzing a Fake Bank of India Re-KYC APKSince I am into cybersecurity, it’s easy to know this kind of APK. Also, it’s obvious no government bank is going to send their APK to…
Cyb3r M!nds·Jul 12Part 2: Static Analysis (The Attack/Code Review)Welcome back, researchers! In our previous guides, we built the ultimate hacking lab and wired up our proxies. But before you start…
Ahmed Elessaway·Jun 6I Found a Stranger’s Phone. I Had No Way In. So, I Built One.A real story about mobile forensics, FRP bypass, chipset research, and passive OSINT, all in service of getting a phone back to its owner.A response icon1A response icon1
InFMI Cyber Security Consulting ServicesbyRobit K.·Mar 12Exploring Android Application Vulnerabilities using reAVSDalam proses mobile application penetration testing, salah satu tahap awal yang sering dilakukan adalah static analysis terhadap file APK…
