TGViewer
Channel Public Channel
Android Security & Malware

Android Security & Malware

@androidmalware

Mobile cybersecurity channel
Links: https://linktr.ee/mobilehacker
Contact: mobilehackerofficial@gmail.com
Open in Telegram
Subscribers
44.7K
Photos
136
Videos
22
Links
2.9K

Showing posts older than #1960 · Back to latest

Older Posts 20 shown
Post #1958 6.9K
Tutorial on how to build NetHunter image for OnePlus 7 Pro
Kali NetHunter supports 89 Android models, however, offers to download up to 32 precompiled images.
Because of that, for 57 devices, users must manually build an installation image
https://www.mobile-hacker.com/2023/07/24/nethunter-hacker-iii-how-to-build-kali-nethunter-for-oneplus-7-pro/
Mobile Hacker NetHunter Hacker III: How to build Kali NetHunter for OnePlus 7 Pro Mobile Hacker In previous posts we went through installation process of rootless and rooted NetHunter on OnePlus 7 device, using already pre-compiled image from Kali website. Since the OnePlus 7 is a preferred high-end device by NetHunter, its image is already compiled…
  • 👍 13
  • ❤ 6
  • 😱 4
  • 🤔 1
Post #1957 6.98K
In details slides explaining exploitation of binder kernel use-after-free (UAF) vulnerability in the Android kernel (CVE-2022-20421) to achieves full kernel R/W
Affected devices: devices running Kernel version 5.4.x and 5.10.x

Slides: https://0xkol.github.io/assets/files/OffensiveCon23_Racing_Against_the_Lock__Exploiting_Spinlock_UAF_in_the_Android_Kernel.pdf
Research: https://0xkol.github.io/assets/files/Racing_Against_the_Lock__Exploiting_Spinlock_UAF_in_the_Android_Kernel.pdf
PoC: https://github.com/0xkol/badspin
  • 🔥 9
  • 👍 3
Post #1955 11.7K
Bypass Instagram and Threads SSL pinning on Android
You can download already patched APKs for none-rooted devices, patch APK using Python script yourself, or download Frida bypass script for rooted Android
https://github.com/Eltion/Instagram-SSL-Pinning-Bypass
GitHub Eltion/Instagram-SSL-Pinning-Bypass Bypass Instagram SSL pinning on Android devices. Contribute to Eltion/Instagram-SSL-Pinning-Bypass development by creating an account on GitHub.
  • 👍 16
  • ❤ 6
  • 👏 1
Post #1954 7.82K
Android SpyNote attacks electric and water public utility users in Japan
https://www.mcafee.com/blogs/other-blogs/mcafee-labs/android-spynote-attacks-electric-and-water-public-utility-users-in-japan/
McAfee Blog Android SpyNote attacks electric and water public utility users in Japan | McAfee Blog Authored by Yukihiro Okutomi McAfee's Mobile team observed a smishing campaign against Japanese Android users posing as a power and water infrastructure
  • 👍 11
  • 👏 1
Post #1953 12.5K
How to reverse engineer #Xamarin iOS and Android apps
Xamarin is open-source platform that allows to create cross platform apps for iOS, Android, and Windows using C#
https://www.appknox.com/security/xamarin-reverse-engineering-a-guide-for-penetration-testers
Appknox Xamarin Reverse Engineering: A Guide for Penetration Testers Learn the essentials of reverse engineering Xamarin apps and why penetration testing is essential to keep your mobile applications secure
  • 👍 19
Post #1950 7.76K
How to root OnePlus 7 Pro and install Kali NetHunter with custom kernel
[blog] https://www.mobile-hacker.com/2023/07/18/how-to-install-kali-nethunter-on-rooted-oneplus-7-pro/
[video] https://youtu.be/nkiy5iwa6Vs
Mobile Hacker NetHunter Hacker II: How to install Kali NetHunter on rooted OnePlus 7 Pro - Mobile Hacker In this post we will go through installation of NetHunter with full kernel support on OnePlus 7 Pro device. The main benefit is to have drivers support for internal or external devices such as Wi-fi, Bluetooth, HID, BadUSB and SDR gadgets. Our goal will be…
  • 👍 18
  • ❤ 1
Post #1948 24.5K
Bypassing advance root detections using Frida
Techniques learned from video:
-presence of SU binary
-SELinux policies
-mountinfo
-attr/prev
-looking for SU bin paths using Supervisor calls

Video: https://youtu.be/7KqPwxlA-00
Scripts and POCs: https://github.com/fatalSec/in-app-protections
YouTube Bypassing advance root detections using Frida #mobilesecurity #rootdetection #android #mobilepentesting #reverseengineering #radare2 #arm64 Hello everyone, hope you all are doing good. In this video, we are going to learn various different techniques used by app developers to protect their app from…
  • 🔥 17
  • 👍 12
  • ❤ 3
Post #1947 13.2K
Finding the Entrypoint of iOS Apps in Ghidra
In video tutorial we extract the components of an iOS application and learn how to find the entrypoint using Ghidra to start reverse engineering
https://youtu.be/mLDsIMXafP4
YouTube Finding the Entrypoint of iOS Apps in Ghidra In this video we extract the components of an iOS application and learn how to find the entrypoint in Ghidra to start reverse engineering. --- Timestamps: 00:00 Intro 00:33 Grabbing Sample 01:41 Don't Dump the whole thing! 02:29 Info.plist 03:40 Mach-O…
  • 👍 20
Post #1944 7.35K
How to install Kali NetHunter on rootless Android via Termux and how to set it up as a portable Kali Linux workstation
Blog: https://www.mobile-hacker.com/2023/07/11/nethunter-hacker-i-installation-of-rootless-kali-nethunter/
Video tutorial: https://youtu.be/fqaSEbaYkJQ
Mobile Hacker NetHunter Hacker I: Installation of rootless Kali NetHunter - Mobile Hacker If you seek for Kali desktop experience on your smartphone without risks of voiding warranty by rooting it and a chance of sticking in bootloop or even bricking it, this tutorial is for you. To compare pros and cons of having NetHunter on rooted and none…
  • 👍 17
  • ❤ 5
Post #1942 7.15K
Android malware installed directly from a website can bypass "installation from untrusted sources" warning using WebAPK technology
WebAPK enables creation Android native apps from web applications
https://www.linkedin.com/pulse/using-webapk-technology-phishing-attacks-csirt-knf
Linkedin Using WebAPK Technology for Phishing Attacks Report: Using WebAPK Technology for Phishing Attacks Introduction The CSIRT KNF team carried out a detailed analysis of a website reported by RIFFSEC (https://twitter.com/getriffsec/status/1676663509617131520).
  • 👍 23
Post #1940 8.28K
Using MLIR for Dalvik Bytecode Analysis
Using intermediate representations allows analysts to write optimizations and code analysis passes easier than parsing binary or bytecode directly. Kunai is a library intended for static analysis of dalvik bytecode, in a newer version of the library, the idea is to use the capabilities and possibilities offered by MLIR, writing a new dialect centered on Dalvik instructions.
Presentation: https://youtu.be/hfqOivYdD40
Slides: https://llvm.org/devmtg/2023-05/slides/Lightning-Talks/01-Eduardo-EuroLLVM2023.pdf
YouTube 2023 EuroLLVM - Using MLIR for Dalvik Bytecode Analysis 2023 European LLVM Developers' Meeting https://llvm.org/devmtg/2023-05/ ------ Using MLIR for Dalvik Bytecode Analysis Speaker: Eduardo Blázquez ------ Slides: https://llvm.org/devmtg/2023-05/slides/Lightning-Talks/01-Eduardo-EuroLLVM2023.pdf ----- Using…
  • 👍 14
  • ❤ 3
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →