This article analyzes a driver‑side iOS 18 crash triggered by BackBoardServices calling exit, explains the underlying XPC and C++ destructor chain, explores failed hook and compiler‑flag workarounds, and presents a reliable atexit‑based solution that eliminates the crash on iOS 18 and later.
This tutorial demonstrates how to use Frida to hook Java‑level encryption functions in Android apps, covering preparation utilities, self‑exfiltration of MD5, SHA1, MAC, DES/AES/RSA, and signature algorithms with detailed code snippets and visual examples.
This comprehensive tutorial walks through using Frida to hook Android applications, covering official API references, loading APKs, hooking normal and static methods, modifying parameters and return values, handling constructors, inner and anonymous classes, enumerating loaded classes and methods, dynamic dex loading, selective hooking, and practical examples such as programmatically clicking a login button, all illustrated with clear code snippets and explanations.
This tutorial walks you through setting up a Python virtual environment, installing Frida and frida‑server on a rooted Android device, configuring the server, verifying the connection, and writing JavaScript hooks to intercept login functions, complete with code snippets, command examples, and troubleshooting tips.
This guide walks through configuring and using Frida's server, gadget, and inject tools on Android devices, detailing installation steps, command‑line usage, persistent and non‑persistent hooking methods, and common pitfalls to avoid for effective mobile reverse engineering.
This article investigates the Android 5‑6 RenderThread native crash caused by a missing EGL surface when TextureView.getBitmap is called before ThreadedRender initialization, analyzes the root cause through code inspection and runtime logs, and presents a bytecode‑instrumentation fix that dramatically reduces the crash rate.
By reverse‑engineering the iOS 16 WKWebView image‑analysis crash, the team identified a nil‑buffer bug in VisionKitCore’s CGImage creation, then mitigated it by runtime‑hooking VKCRemoveBackgroundResult’s createCGImage (returning NULL) and suppressing the image‑analysis gesture, reducing crashes from thousands to near zero.
This article provides a detailed technical analysis of an Android step‑counter simulator app that leverages the Xposed framework to hook system sensor APIs, modify step data, and achieve user‑defined step targets, while also explaining relevant sensor fundamentals and required permissions.
This tutorial demonstrates how to use Frida to hook Java-level encryption functions on Android, covering MD5, SHA1, MAC, DES/AES/RSA ciphers, and signature algorithms by intercepting update, digest, init, and doFinal methods and logging their inputs and outputs in various formats.
This tutorial walks you through using Frida to hook Android applications, covering API basics, method interception, constructor and field manipulation, overload handling, dynamic class loading, and practical code snippets for both static and instance methods, all while emphasizing safe, educational use.
This tutorial walks you through installing Frida, setting up a Python virtual environment, deploying frida‑server to an Android device, and writing JavaScript hooks to intercept app functions, providing detailed commands, code snippets, and verification steps for effective mobile reverse‑engineering.
Raphael is a native memory‑leak detection tool developed by Bytedance's video team, open‑sourced to address Android native memory issues through a combination of inline/PLT hooking, efficient stack unwinding, and optimized caching, offering low‑overhead, version‑independent monitoring across diverse native allocation APIs.
This article explains how to use AOP techniques such as Method Swizzle and NSProxy to hook UICollectionView and UIViewController delegate methods for precise event tracking, analyzes compatibility problems caused by multiple delegate proxies in large apps, and proposes three practical solutions to avoid crashes and maintain extensibility.
This article explores using AOP techniques such as Method Swizzle and NSProxy‑based delegate proxies to instrument iOS view controllers and collection view delegates, analyzes crashes caused by multiple setDelegate hooks—including interactions with RxCocoa—and proposes several practical solutions to ensure stable hooking in complex app environments.
This article explains a novel Swift hooking technique that modifies the virtual function table (VTable) to replace method implementations, detailing Swift's runtime structures such as TypeContext, Metadata, OverrideTable, and providing concrete ARM64 assembly and Swift code examples.
The article details a thorough investigation of native‑memory crashes in the K歌 Android app, describing how memory usage was profiled, comparing three analysis tools, building a custom loli_profiler‑based hook to track malloc/free and bitmap allocations, exposing leaks, and outlining fixes and future optimization plans.
This article explains the principles of static and dynamic linking on iOS, details how symbol tables, relocation entries, and GOT/PLT work, and demonstrates a practical static‑library hooking technique using relocation tables and the fishhook library.
This article explains why adding parameter‑reading code to a variadic‑function hook causes a deterministic crash due to stack context pollution, analyzes the calling‑stack layout and register usage with ARM64 assembly, and presents a heap‑based context‑saving solution using TrampolineHook to safely intercept variadic methods on iOS.
To prevent translation errors and post‑release crashes in multilingual Android apps, the article describes a dynamic resource‑replacement system that loads external language packs via AssetManager, proxies Resources through reflection, integrates the proxy with ResourcesManager, and updates WebView assets, eliminating garbled text and long‑press crashes.
By generating an order file that places frequently executed code contiguously, the authors reduce iOS app cold‑launch page faults by about 15%, achieving roughly a 10% launch‑time improvement without code changes, using runtime hooking and static analysis to build the symbol ordering.
This article explains how the highly invasive plugin framework "Dual Master" is adapted to Android P by analyzing the refactored Activity lifecycle handling, the EXECUTE_TRANSACTION message flow, and the necessary code modifications for activity placeholder replacement, restoration, and system provider hooking.
This article introduces the Xposed framework, explains its architecture and root‑based installation process, then explores alternative non‑root implementation methods using sandbox virtualization and Java hook techniques, detailing dual‑app virtualization, framework migration, and practical code examples for running Xposed modules on unrooted Android devices.
This article provides a detailed technical walkthrough of how the Xposed framework replaces the Android Zygote process, initializes its runtime, registers services, and hooks methods by examining the main, initialize, startAll, and onVmCreated functions along with installation steps.
