This article examines why an inline hook created with Substrate on ARM Thumb crashes, detailing the hook mechanism, the offending PC‑relative ADR instruction, and the necessary instruction fixes to prevent control‑flow errors.
This article walks through extracting the hidden ID from Battle of Balls' short share URL, decoding the base64 parameters, and using the revealed ID to request dragon eggs (or lollipops) automatically with a Python script.
This article reverse‑engineers a single‑line JavaScript snippet that creates a 128‑byte ray‑tracing demo, explains how the code works, refactors it for readability, and analyses the underlying arithmetic and bitwise operations that produce the patterned output.
This article compiles a comprehensive list of 123 Python-based penetration testing tools, covering network utilities, debugging and reverse‑engineering frameworks, fuzzing platforms, web testing kits, forensic analysis utilities, malware analysis helpers, PDF inspection modules, miscellaneous libraries, recommended books, talks, and additional resources for security professionals.
This article walks through the reverse‑engineering of a compact JavaScript one‑liner that draws a patterned image, refactors it into readable modules, explains each transformation—including variable renaming, loop conversion, ternary expansion, bitwise operations, and switch‑case replacement—while illustrating the underlying math with graphs and code snippets.
This article presents a comprehensive list of Python-based tools covering network packet analysis, debugging, reverse engineering, fuzzing, web testing, forensics, malware analysis, PDF inspection, and various miscellaneous utilities useful for security professionals and researchers.
This article provides a step‑by‑step tutorial on setting up the development environment, installing essential tools, and performing APK reverse engineering and security analysis on Android applications, covering JDK, SDK, NDK, Apktool, Dex2jar, JD‑GUI, IDA, WinHex, and Eclipse.
This article outlines a systematic approach to onboarding and training new Site Reliability Engineers, covering trust building, readiness assessment, diverse learning methods, structured curricula, on‑call milestones, project‑focused work, reverse‑engineering skills, statistical thinking, and improvisation techniques to develop high‑performing SRE teams.
The article outlines common Android security vulnerabilities such as unprotected resources, easily decompiled Java and native code, and proposes protection measures like resource obfuscation, code encryption, native code hardening, and introduces the Qotector platform for APK analysis and reinforcement.
A programmer hired to fix a quirky questionnaire program on an old 3B2 machine discovers that the source code repeatedly reverts, the curses library is tampered, and ultimately a malicious compiler injects backdoor code, leading to a multi‑day forensic investigation and replacement of the toolchain.
This article dissects Qingting FM’s Android app, revealing how it spawns multiple background services, launches invisible activities, and uses hidden WebViews to fake daily active users and ad impressions, while providing step‑by‑step reverse‑engineering instructions for developers.
A user received a suspicious SMS with a malicious app link, prompting an analyst to download, decompile, and dissect the Android malware, revealing hidden Device Admin permissions, obfuscated code, DES-encrypted credentials, and the attacker’s email address, ultimately exposing how the trojan steals personal data.
