Blog Page

14Feb

Android permissions grouped per API and protection level

Lists of the Android Permissions grouped together based on protection level, like dangerous or signature or based on the API …

24Jan

Statistics on more than 1 million apps from Google Play Store

What is the average size of a play store app? or the number of permissions requested ? and several other …

12Nov

3 ways for Dynamic Code Loading in Android

Dynamic code loading in Android, the methods malware employ to hide malicious behaviour.

24Sep

Malware Dropper disguised as an Ebay Android App

Analysis on a malware dropper which was disguised as an Ebay Android app, with a lot of features like premium …

20May

New flag in APKTOOL for automatic generic network configuration

The known apktool, just got a slight upgrade to include a new flag, allowing it to automatically embed a generic/permissive …

20Apr

Automated security scanning against VAmPI

How well automated API security scanners work against an already vulnerable API?

17Oct

InsecureShop Write-up, all vulnerabilities explained

A full write-up for the InsecureSHop application, to serve for learning purposes

12Oct

Exploiting content providers through an insecure SetResult implementation

How an insecure implementation of SetResult can lead to exploitation of the available content providers.

23Sep

AWS Cognito Misconfigurations in Android Apps

Learn how an AWS Cognito Identity Pool can be identified in an APK and then checked if it is misconfigured.

12Jun

Reversing an Android APK using ASM library

A quick guide on how to instrument an Android APK with the help of the ASM library and extract information …

Our Categories & Tags

You will currently find 10 categories!

Search something?

Search articles directly or articles with specific categories or tags!

#android(14)

#noob-friendly(5)

#tutorial(4)

#wagtail(4)

#htb(3)

#insecureshop(3)

#JNI(3)

#play store(3)

#web-development(3)

#website(3)

#C(2)

#cracking(2)

#crypto(2)

#frida(2)

#john(2)

#owasp-top-10(2)

#security-testing(2)

#shell(2)

#ssh(2)

#statistics(2)

#tools(2)

#aes(1)

#anubis(1)

#apk(1)

#apktool(1)

#atom(1)

#aws(1)

#backup(1)

#bianlian(1)

#bruteforce(1)

#burp(1)

#cfr(1)

#classloader(1)

#cognito(1)

#content provider(1)

#dex2jar(1)

#dirbuster(1)

#django(1)

#docker(1)

#easy(1)

#gradle(1)

#hydra(1)

#kotlin(1)

#malware(1)

#NDK(1)

#nginx(1)

#offensive-security(1)

#pentest(1)

#reverse-engineering(1)

#rss(1)

#script(1)

#self(1)

#SeLinux(1)

#seo(1)

#SetResult(1)

#socat(1)

#socks5(1)

#ssl(1)

#ssl-pinning(1)

#static analysis(1)

#vulnerable-api(1)

#welcome(1)

#zap(1)

#erev0s(0)

#Unix Domain Sockets(0)

... where articles live.

Search something?