Awesome Python Security resources 🕶🐍🔐. Contribute to guardrailsio/awesome-python-security development by creating an account on GitHub.

[WIP] Simple mobile applications sandbox file browser tool. Powered with [frida.re](https://www.frida.re). - 0x742/noia

We identified an undocumented Android spyware we have named ActionSpy while tracking Earth Empura, also known as POISON CARP/Evil Eye. The campaign is reportedly targeting Uyghurs by compromising their Android and iOS mobile devices.

Here, we will address cryptojacking in mobile devices. We’ll dive into what cryptojacking is, how to detect it, and how to prevent it. Crypto mining is one

Is jailbreaking an Apple TV worth it? If you are working in the forensics, it definitely is. When connected to the user's Apple account with full iCloud access, the Apple TV synchronizes a lot of data. That data may contain important evidence, and sometimes…

Posted by Brandon Azad, Project Zero I recently found myself wishing for a single online reference providing a brief summary of the high...

Frida Boot 👢- A binary instrumentation workshop, with Frida, for beginners! - leonjza/frida-boot

Have you been wondering about how to start in mobile application security, more specifically iOS/Android application security? In this talk, I will try to answer some of the most common questions about getting started in mobile application security testing.…

With new 5G networks, mobile operators face numerous challenges. One of them is the GTP protocol, used alongside SS7 and Diameter on core networks to transmit user and control traffic. Stay ahead of the curve with knowledge and preparation. Download the «Threat…

This post introduces a tool to dump Samsung Galaxy S7 bootROM using known and fixed security vulnerabilities in Trustzone. The source code is available on GitHub. Procedure We use a Galaxy S7 phone, with ADB access and root privileges. BootROM code is at…

The National Security Council Secretariat has backed the recommendation to block or discourage use of 53 mobile apps

My previous blogposts explained how to intercept Flutter traffic on Android ARMv8, with a detailed follow along guide for ARMv7. This blogpost does the same for iOS. ⚠️ Update August 2022 ⚠️An upda…

Led by renowned cybersecurity analysts Noam Rotem and Ran Locar, our security research team recently discovered a security vulnerability in US

Recon

Recon workflow
Horizontal & vertical Correlations
<a href="https://mxtoolbox.com/asn.aspx">https://mxtoolbox.com/asn.aspx</a>
<a href="https://viewdns.info/reversewhois">https://viewdns.info/reversewhois</a>
<a href="https://domaineye.com/">https:…

The Ginp mobile banking malware, which emerged in late 2019, is one of the top Android banking malware families today. Read on to learn more about how Ginp is impacting Android malware in the past 90 days.

This article is the first part in a series that will cover some of the different vulnerabilities present in the “Purposefully Insecure and…