Reverse Engineering 14

• Fake recruitment, remote JSON payloads, and function-inliner malware (analysis) May 19, 2026 Clone-and-run recruitment lures that pull obfuscated Node.js from jsonkeeper-style hosts: IOCs, SHA-256 hashes, a small fetch script, function-inliner teardown, MITRE mappings with links, and what to do if you already ran the artifact. 12 minutes
• Unlocking the Vault: A Deep Dive into macOS ARM64 Trial Enforcement and Binary Patching Feb 1, 2026 Introduction In the course of analyzing a decompiled macOS productivity application—a calendar and meeting alert utility with a time-limited … 8 minutes
• Malicious Code Loading via Base64 Encoded .dex File Nov 10, 2025 Introduction In the course of analyzing a decompiled Java application, we encountered an unusual code segment that decodes a Base64 encoded … 2 minutes
• Identifying Packages Used by Flutter Apps Sep 8, 2025 Sometimes it’s useful to determine what Flutter packages are used in a Flutter app. This can be useful for security audits, vulnerability … One minute
• Analyzing a Weird Behavior in a Tenda AX3000 WiFi6 Mesh Router Sep 7, 2025 I recently purchased a Tenda AX3000 WiFi6 Mesh Router from AliExpress. The setup was quite straightforward and it works well. However, I was … 3 minutes
• Intercepting HTTP traffic in Android Flutter Apps Nov 2, 2024 Intercepting HTTP traffic in Flutter apps has attracted significant interest among security researchers. Tools like reflutter have … 2 minutes
• Frida APK Patcher Aug 16, 2024 This tool allows you to patch APK files for Frida instrumentation using the Frida gadget. It injects the required libraries and smali code … 2 minutes
• Analyzing KD Live Memory Dump with Volatility May 1, 2024 Step 1: Identify the Memory Image NB: Volatility version 2 Ensure you have the memory dump file ready, potentially in a raw format or the … 2 minutes
• Obscurity is not Security: A Case Study of a Cross-Platform Mobile Application Oct 9, 2022 This research presents a security analysis on a cross-platform mobile application. The My Vodafone (Ghana) application formed the basis for … 21 minutes
• Possible Implementation Flaws in Mobile Applications: A Security Audit of a Mobile Application Jan 10, 2021 This research presents a security flaw in a mobile application (both iOS and Android). The platform used for the assessment was iOS. Both … One minute