Bypassing MAUI Certificate SSL Pinning on Android
A journey from failing to bypass SSL pinning on a .NET MAUI app to building a generic Frida script that works on JIT, AOT, SocketsHttpHandler, and wrapped handlers - no app-specific names needed.
1437 words
|
7 minutes
Cover Image of the Post
From SuperSU to KernelSU: How Android Rooting Grew Up
The story of how Android root evolved from SuperSU's direct system modifications to Magisk's systemless approach and finally to KernelSU's kernel-level model.
2506 words
|
13 minutes
Cover Image of the Post
The Way to Hamida: Frida Artifacts
A deep dive into the fingerprints and artifacts Frida leaves behind — how they are detected, how they were patched, and what Hamida does differently.
631 words
|
3 minutes
Cover Image of the Post
Advanced Frida Detection Bypass
A comprehensive guide to bypassing advanced Frida detection mechanisms in Android apps, including port detection, memory maps artifact scanning, and direct syscall hooking techniques.
3065 words
|
15 minutes
Cover Image of the Post
8kSec.io iOS Challenges Writeups
A n00bie's journey through iOS application exploitation challenges covering reverse engineering, vulnerability discovery, and mobile security.
61 words
|
1 minutes
Cover Image of the Post
MobileHackingLabs iOS Challenges
A n00bie's journey through iOS application exploitation challenges covering reverse engineering, vulnerability discovery, and mobile security.
61 words
|
1 minutes
Cover Image of the Post
8kSec.io Android Challenges
A n00bie's journey through Android application exploitation challenges covering reverse engineering, vulnerability discovery, and mobile security.
61 words
|
1 minutes
Cover Image of the Post
Brod & Co. — Android CTF Writeup (BrunnerCTF 2025)
Reverse engineering Brod & Co. from BrunnerCTF 2025: Flutter + native analysis, Frida↔Ghidra mapping, overflow confirmation, and pulling the flag via util_func_c(0x1337).
774 words
|
4 minutes
Cover Image of the Post
1
2