𝐖𝐡𝐞𝐫𝐞𝐀𝐦𝐈𝐑𝐞𝐚𝐥𝐥𝐲 #Writeup #iOS Hooked #CLLocationManager delegate with #Frida to inject fake GPS coordinates, bypassing jailbreak detection and geofence validation to reveal the hidden flag. - @8kSec Link: lautarovculic.github.io/writ… #Mobile #Security

𝐓𝐫𝐚𝐜𝐞𝐓𝐡𝐞𝐌𝐚𝐩 #Writeup #iOS Hooked #CLLocation distance method with #Frida to spoof proximity checks, bypassing the 50-meter validation to collect all markers. - @8kSec Link: lautarovculic.github.io/writ… #Mobile #Security

𝐓𝐫𝐚𝐜𝐞𝐓𝐡𝐞𝐂𝐡𝐚𝐭 #Writeup Traced obfuscated Swift messaging class with #frida-trace, then hooked dispatch function to intercept chat data by bridging Swift Strings to #NSString, bypassing Swift SSO limitations. - @8kSec Link: lautarovculic.github.io/writ… #Mobile #Security

𝐒𝐰𝐢𝐳𝐳𝐥𝐞𝐌𝐞𝐓𝐢𝐦𝐛𝐞𝐫𝐬 #Writeup Identified obfuscated guard method in #iOS binary using Ghidra, then swizzled it at runtime with #Frida to bypass validation and trigger flag display in alert controller. - @8kSec Link: lautarovculic.github.io/writ… #Mobile #Security

𝐅𝐫𝐢𝐝𝐚𝐈𝐧𝐓𝐡𝐞𝐌𝐢𝐝𝐝𝐥𝐞 #Writeup Evaded #iOS anti-Frida checks by renaming server binary and switching ports, then used dynamic hooking to capture flag from function arguments. - @8kSec Link: lautarovculic.github.io/writ… #Mobile #Security

𝐅𝐫𝐞𝐞𝐅𝐚𝐥𝐥𝐆𝐚𝐦𝐞 #Writeup Bypassed #iOS #Flutter score validation using #Frida to hook FlutterMethodCall, manipulating leaderboard data at runtime before SQLite insertion. - @8kSec Link: lautarovculic.github.io/writ… #Mobile #Security

𝐂𝐥𝐞𝐚𝐫𝐑𝐨𝐮𝐭𝐞 #Writeup Bypassed #iOS proxy detection using #Frida to hook NSJSONSerialization and NSURLSession methods, intercepting sensitive JSON payload at runtime before network transmission. - @8kSec Link: lautarovculic.github.io/writ… #Mobile #Security

𝐁𝐚𝐝𝐏𝐫𝐞𝐟𝐞𝐫𝐞𝐧𝐜𝐞𝐬 #Writeup Exploited #iOS app preferences via #Frida to modify NSUserDefaults at runtime. - @8kSec Link: lautarovculic.github.io/writ… #Mobile #Security

𝐁𝐚𝐜𝐤𝐒𝐲𝐧𝐜 #Writeup Exploited #iOS remote config via MITM. Injected JSON payload to trigger hidden exfiltration logic & app leaked sandbox flag to controlled endpoint. - @8kSec Link: lautarovculic.github.io/writ… #Mobile #Security #CTF

8kSec – 𝐁𝐨𝐫𝐝𝐞𝐫𝐃𝐫𝐨𝐢𝐝 #Writeup Very good challenge to practice with #BroadcastReceivers and #Bypass in kiosk mode - @8kSec Link: lautarovculic.github.io/writ… #MobileSecurity #Hacking #Android

8kSec – 𝐀𝐧𝐝𝐫𝐨𝐃𝐢𝐚𝐥𝐞𝐫 #Writeup Exploited a zero-interaction Intent.ACTION_VIEW handler to trigger phone calls via tel: scheme using a hardcoded token. Achieved Confused Deputy privilege re-delegation, bypassing app-level restrictions by abusing internal logic of a misconfigured #Android component. - @8kSec Link: lautarovculic.github.io/writ… #MobileSecurity #Hacking #AndroidSecurity