A Glimpse Into DexProtector
This blog post provides a high-level overview of DexProtector's security features and their limitations
Read analysisRESEARCH LOG
Articles
Long-form offensive and defensive research into obfuscation, software protections, reverse engineering, and the tooling built along the way.
Fuzzing Windows ARM64 closed-source binary
This blog post introduces coverage-guided fuzzing with QBDI and libFuzzer targeting Windows ARM64.
Read analysis
Instrumenting an Apple Vision Pro Library with QBDI
This blog post demonstrates how to extract liblockdown.dylib from the visionOS dyld shared cache to be instrumented with QBDI on an Apple M1.
Read analysis
iCDump: A Modern Objective-C Class Dump
This blog post introduces iCDump, a new Objective-C class dump based on LLVM.
Read analysis
Open-Obfuscator: A free and open-source obfuscator for mobile applications
This blog post introduces open-obfuscator, a new open-source project to obfuscate mobile applications.
Read analysis
Part 2 – iOS Native Code Obfuscation and Syscall Hooking
This second blog post deals with native code obfuscation and RASP syscall interception
Read analysis
Part 1 – SingPass RASP Analysis
This first blog post introduces the RASP checks used in SingPass
Read analysis
A Journey in iOS App Obfuscation
This series of blog posts details how obfuscators can protect iOS applications from reverse engineering
Read analysis
PGSharp: Analysis of a Cheating App for PokemonGO
This blog post is about the internal mechanisms of PGSharp, a cheat engine for PokemonGO.
Read analysis
Gotta Catch 'Em All: Frida & jailbreak detection
This blog post analyzes the Frida and Jailbreak detection in PokemonGO for iOS.
Read analysis
r2-pay: whitebox (part 2)
This second blog post explains how to recover the whitebox's key from the obfuscated library libnative-lib.so
Read analysis
r2-pay: anti-debug, anti-root & anti-frida (part 1)
This first blog post describes the protections in the challenge r2-pay.
Read analysis
A Glimpse Into Tencent's Legu Packer
Analysis of Tencent Legu: a packer for Android applications.
Read analysis
Android Native Library Analysis with QBDI
This blog post deals with QBDI and how it can be used to reverse an Android JNI library
Read analysis
When SideChannelMarvels meets LIEF
On how we used LIEF to lift an Android x86_64 library to Linux to perform our usual white-box attacks on it.
Read analysis
How to use frida on a non-rooted device
This post explains how to use Frida gadget on a non-rooted device.
Read analysis
Have fun with LIEF and Executable Formats
This blog post introduces new features of LIEF as well as some uses cases.
Read analysis
Open-sourcing LIEF
We are open-sourcing LIEF, a library to parse and manipulate ELF, PE, and Mach-O binary formats. This blog post explains the purpose of this project and some parts of its architecture.
Read analysis
Code coverage using a dynamic symbolic execution
This blog post introduces code coverage with Triton
Read analysis