In May of this year, we noticed that Chrome fixed a V8 vulnerability that was being exploited in the wild in this update. We quickly pinpointed the fix for this vulnerability and discovered that it was a rare bug in the Parser module, which piqued our interest…

Reverse engineering VPN client software to hijack session cookies.

Introduction Unidbg is an open-source framework to emulate Android native libraries (and to a certain extent has experimental iOS emulation capabilities). There are a few use cases where emulating Android libraries is beneficial. I will cover a single use…

So recently a challenge(Layers) from 3kCTF featured control flow flattening using OLLVM. Although I did know about control flow flattening I hadn’t encountered it personally. And as I’ve been experime

In this video, we will cover instructions related to comparing the count of launch arguments in argc and also how the dereferencing of elements in the argv[] array appear in the disassembly to better understand how malware may use these values.

Using Binja…

#flutterobfuscatedapp #mobilesecurity #dartdecompilation #dartobjectpool #reverse-engineering

Hello everyone and welcome to another video on Flutter by FatalSec. In this video we are gonna learn how to deal with an obfuscated flutter application by resolving…

Two ways we can use to deliver malware on macOS silently

ivanti just pushed a patch for a Critical CVSS 9.8 Remote Code Execution Vulnerability that I reported on May 1st 2024, impacting Ivanti Endpoint Manager (EPM). in the following blog post I will be publishing the fully working unauthenticated exploit and…

Basics of WPA GUI

This comprehensive Frida course for Android dives into the powerful capabilities of Frida, a dynamic instrumentation toolkit. Designed for both beginners and advanced users, the course covers essential concepts and techniques for leveraging Frida in Android…