How I Found a Heap Overflow in imgproxy’s ICO Loader In September 2026, I independently discovered and reported an integer overflow in imgproxy’s custom ICO loader. An image could make the loader ...
Chaining Android Components to Exfiltrate Sensitive Data from a Real-World Application 🔬 “Every vulnerability starts with a question” Introduction During a real-world security assessment of an A...
📲 🔓 Bypassing SSL Pinning on Play Store Android Device Emulators without Frida Step by step, detailed guide for how to bypass the SSL Pining on Android Device Emulators (AVDs) with Play Store i...
A guide to exploit and escalate from a simple Cross-site Scripting (XSS) to a Local File Inclusion (LFI) in Android Apps 🔓 “The more you understand the code, the more able you are to hack it” In...
Intro I wanted to write this post since I was aware of the importance of mental health working in cybersecurity. Sometimes you may have noticed that after hours of hard work, your mind cannot focu...
Intro: Before this story begins… Starting with this write-up, I’d like to write a few words about this finding and its history. Around August 2023, I met a person who is currently a big friend an...
Resolution of Instant Machine of Hack The Box 📲 “It’s time to hack Mobile Apps! Reverse Engineering is our ally ;)” Enumeration Let’s start hacking this machine by first performing a basic bu...
Resolution of Clicker Machine of Hack The Box 🔬 “Cool Hacking always have Reverse Engineering…” Enumeration Scan ports with Nmap looking for open ports via TCP protocol (default of Nmap), s...
En la actualidad todos nos comunicamos por correo electrónico (email), tanto en nuestro trabajo como para registrarnos en sitios web, para iniciar sesión en cuentas bancarias digitales y un sin fin...
It is possible to use FFUF like alternative to bypass Burp Suite Community Edition’s Intruder attacks delay? The answer is: Yes! you can. PoC Burp Suite Community Edition is very good to use t...