MobileHackingLab retweeted
MobileHackingLab retweeted
BWA HA HA HA HA
Samsung Pwned
Pixel tomorrow :)
Had an absolute banger with this one! Finally wrapped up and captured the flag for "KYC Me If You Can" by @MobileHackLab
Check out the full writeup here: medium.com/@ibzsaify/bypassi…
#MobileSecurity #AndroidHacking #ReverseEngineering #Cybersecurity #AppSec #CTF
MobileHackingLab retweeted
سلسلة استغلال حرجة تعتمد على دمج ثلاث ثغرات للسيطرة على هواتف @Samsung، عبر استغلال المساعد الصوتي Bixby، كشفها باحثان من @Microsoft و @MobileHackLab
أصدرت Samsung تحديثات أمنية للتطبيقات المستهدفة، مع الإشارة إلى أن التهديد يظل قائماً في الأجهزة التي تفتقر للتحديثات.
MobileHackingLab retweeted
A CFO approved a $25M wire transfer last year. The person on the call was a deepfake.
We are not ready for what AI attackers can do.
I spent 20 years in offensive security. I built a live, hands-on masterclass to close that gap.
8 hours. Real labs. No fluff.
Not for everyone. Link below:
mobilehackinglab.com/link/ot…
@MobileHackLab
#AISecurity #Deepfake #CyberSecurity #AIRisk
MobileHackingLab retweeted
Thank you so much @MobileHackLab for the giveaway. Really appreciate it. You guys rock!!!
Enjoyed yesterday! Great conference and Great CTF Thanks for everything @MobileHackLab
MobileHackingLab retweeted
FIRST Ever Online Mobile Hacking Conference
Free, worldwide online event bringing the mobile security community together for sessions on mobile hacking, AI, malware, forensics, live mobile‑focused CTF with prizes!
When: March 3 and 4, 2026
Register here: mobilehackinglab.com/mobile-…
😨 From JSInterface bug to 1-click RCE and a 5-figure bounty...
A while ago, our teammate Lyes found a vulnerability in an Android app that eventually earned a 5 figure bug bounty payout.
Finding and validating the full chain manually took ~4 days, which later sparked a simple question. 👇
How much time would this take using Djini.ai?
In the blog post, Lyes walks through both perspectives.
First, the exploit chain as it was pieced together manually.
Then, how the same risky surface surfaced again when retraced with Djini, but in significantly less time.
👉 Full write-up: lnkd.in/eNHkFMM8
🚨 DJINI.AI IS LIVE!
NEW website. NEW interface.
And NEW crazy subscriptions with complementary MHL courses included!
AI agents now help you:
⚡ static + dynamic testing, automated
⚡ fuzz native interfaces & JNI
⚡ auto-collect evidence + reports - incl. screenshots
⚡ logically click through flows for you
⚡ explore real app behavior (iOS & Android) - Visual Intelligence
Want to win FREE access?
Comment on our LinkedIn launch post 👇
linkedin.com/feed/update/urn…
🐸 FREE Android Exploitation Lab
An infinite runner game.
Old Unity version.
Subtle runtime flaws.
Your goal:
🎮 Play
🪝 Instrument
💥 Exploit!
No theory. Just hands-on hacking.
👉 mobilehackinglab.com/course/…
#AndroidSecurity #MobileHacking #AppSec #GameHacking #Frida
🚨𝗡𝗲𝘄 𝗠𝗼𝗱𝘂𝗹𝗲 𝗖𝗼𝗺𝗶𝗻𝗴: 𝗦𝗰𝘂𝗱𝗼 𝗛𝗘𝗔𝗣 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝗮𝘁𝗶𝗼𝗻
Scudo replaced the heap. Hardening went up. Old patterns stopped working.
A Scudo Exploitation module is dropping in the coming weeks for Android Userland Fuzzing & Exploitation.
Already enrolled? Lifetime access applies.
Enroll now, get access at drop 👇
mobilehackinglab.com/afe-pro…
MobileHackingLab retweeted
📱 Sponsor alert!
@MobileHackLab joins #MCC2025 as a Community Hacker sponsor 🎉
They’re giving away Android course vouchers + exam attempts!
Pro tip 👉 Attend the Android Workshop @ MCC2025 to get a head start 🚀
🔗 linkedin.com/feed/update/urn…
Congrats @Yogehi and @Ch0pin with winning Pwn2Own and pwning the Samsung Galaxy s25!
Hearing Bixby speak during the exploit was very cool!
It's confirmed! Ken Gannon / 伊藤 剣 (@yogehi) of Mobile Hacking Lab, and Dimitrios Valsamaras (@Ch0pin) of Summoning Team (@SummoningTeam) used five different bugs to exploit the #Samsung Galaxy S25. They earn $50,000 and 5 Master of Pwn points. #Pwn2Own
MobileHackingLab retweeted
I created the repo to share the code I worked on during the is.gd/tsTHXB from @MobileHackLab
It includes two versions of the same app:
- UIKit (original training version)
- SwiftUI
is.gd/YuHZyL
#iOS #Swift #SwiftUI #UIKit #AppSec #MobileSecurity
Replying to @akanbi_kunle
Thanks for the shout out! Looking forward seeing you do the other labs!
MobileHackingLab retweeted
Misconfigured exported services can be exploited for privilege Escalation, data leakage or remote code execution. Is a serious risk for Mobile application.
#MAPT @MobileHackLab it’s a great platform to learn 💜💜
MobileHackingLab retweeted
Bismillah.
Releasing a new blog on “Exploiting Unsanitized URL Handling and SQL Injection through Deep Links” -> Write-up of Flipcoin Lab for iOS, from @MobileHackLab.
medium.com/@YoKoKho/exploiti…



























