8kSec

Offensive Security Trainings and Services. OnDemand Mobile Security & AI Security Courses - Linkedin: @8ksec

[8kSec @8kSec]

🚨🚨Our newest blog on Android SELinux Internals Part III is out! Read it here: https://t.co/w9m3Qp5S1H. In this one, we look at Six kernel-level techniques to disable SELinux. Five real exploit chains, and we talk about which vendor protections actually work and which don't. #MobileSecurity #AndroidSecurity #InfoSec #Cybersecurity

[8kSec @8kSec]

☀️ SUMMER SALE at 8kSec Academy is live! 25% off every on-demand course through June 30:
→ https://t.co/lWUydt18A4
Five tracks, five certifications:
𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗮𝗹 𝗔𝗜 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 (CAISR) → prompt injection, MCP exploitation, offensive AI agents
𝗠𝗼𝗯𝗶𝗹𝗲 𝗔𝗽𝗽 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝗮𝘁𝗶𝗼𝗻 (CMSE) → iOS/Android/Flutter RE, Frida, IPC
𝗠𝗼𝗯𝗶𝗹𝗲 𝗥𝗲𝘃𝗲𝗿𝘀𝗶𝗻𝗴 & 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝗮𝘁𝗶𝗼𝗻 (OMSE) → ARM64, kernel mitigations, AFL++ fuzzing
𝗶𝗢𝗦 𝗜𝗻𝘁𝗲𝗿𝗻𝗮𝗹𝘀 (CISR) → mach_msg2/XPC, jailbreak internals
𝗔𝗻𝗱𝗿𝗼𝗶𝗱 𝗜𝗻𝘁𝗲𝗿𝗻𝗮𝗹𝘀 (CASR) → Binder IPC, SELinux, Mali GPU
Every course now ships with module glossaries, hands-on homework, and a full mock exam, giving you a structured path to the certification.
25% off through June 30, EST.
Code: SUMMER25

[8kSec @8kSec]

Free, hands-on AI/LLM exploitation labs. Prompt injection, MCP path traversal, adversarial ML, data poisoning, model-file RCE. Each one of this is a purpose-built vulnerable AI app, and not a jailbreak-the-chatbot demo: https://t.co/MlSZw6uKii
Follow @8kSec for more AI security training

[8kSec @8kSec]

Off-by-one writes and pointer overwrite tricks like this are a core ARM64 binary exploitation primitive. Practice building these exploits yourself in our free ARM Exploitation Challenges: https://t.co/Sw1iMBc0Oy

[8kSec @8kSec]

Think about a loop that has i <= 16 instead of i < 16. That one-character bug writes one byte past the buffer, and straight onto a nearby pointer. This walkthrough turns that single byte into arbitrary code execution on ARM64: https://t.co/aDZ1Jeogop
Follow @8kSec for more ARM64 exploitation

[8kSec @8kSec]

Bypassing SSL pinning and intercepting app traffic is a core mobile pentest skill. Our Practical Mobile Application Exploitation course covers Frida instrumentation, runtime manipulation, and traffic interception on real iOS and Android apps, leading to the CMSE certification.
https://t.co/BBv0tfKHWa

[8kSec @8kSec]

Everyone says to add SSL pinning to your mobile apps. This blog argues on reasons to remove it: https://t.co/I5KceSHEjs
A revoked or renewed cert bricks your app until users force-update, and Frida drops the pin in minutes anyway. The real fix moves the decision server-side.
Follow @8kSec for more practical security content

[8kSec @8kSec]

Twelve free iOS application exploitation labs. Frida detection, runtime swizzling, GPS spoofing, SSL bypass. Built like real hardened apps, not toy CTFs: https://t.co/lfjlvRHmVM
Follow @8kSec for more mobile pentest training

[8kSec @8kSec]

Our Practical Mobile Application Exploitation course (CMSE certification) covers the full app-side attack surface. This includes deep link exploitation, IPC, WebViews, Frida-driven runtime analysis, and more:
https://t.co/n5WRBcePIM

[8kSec @8kSec]

Turning a stock Android 15 emulator into a rooted, Frida-ready pentest target. No physical device, no jailbroken loaner. Read the full blog: https://t.co/mH4koxdAwb
Follow @8kSec for more mobile pentest tooling.

[8kSec @8kSec]

Build such exploits yourself in our free ARM Exploitation Challenges: https://t.co/Sw1iMBcyE6

[8kSec @8kSec]

This blog walks through an integer overflow on ARM64 where the bounds check is correct, the strcpy is correct, and its still exploitable!

The overflow happens because of a type cast between validation and copy logic.

Full walkthrough in the post: https://t.co/tCoqZl2rJD

Follow @8kSec for more hands-on security content

[8kSec @8kSec]

Want to go even deeper into Mobile OS internals? Our Offensive Android Internals course covers Android internals, kernel security, SELinux, exploitation, and real-world offensive research techniques in depth. Check it out: https://t.co/XUJW6792Bt

[8kSec @8kSec]

🚨🚨Our newest blog on Android SELinux Internals Part III is out! Read it here: https://t.co/w9m3Qp5S1H. In this one, we look at Six kernel-level techniques to disable SELinux. Five real exploit chains, and we talk about which vendor protections actually work and which don't. #MobileSecurity #AndroidSecurity #InfoSec #Cybersecurity

[8kSec @8kSec]

11 free hands-on Android exploitation labs. Each is a vulnerable APK with a real-world attack class.

Labs include:
→ Bypass kiosk-mode without the wipe
→ Reverse a Flutter password vault statically
→ Make unauthorized calls without permissions

Plus 7 more.

https://t.co/5t1MUYZMWv
Follow @8kSec for more such resources.

[8kSec @8kSec]

Chaining info leaks with memory corruption is core to bypassing modern ARM64 mitigations. We cover ARM64 exploitation end-to-end, ASLR/NX bypasses, ROP, heap and stack corruption in our Offensive Mobile Reversing and Exploitation course.
https://t.co/Z2ZC3t1HgH

[8kSec @8kSec]

This blog walks through bypassing ASLR and NX on ARM64 with two bugs that only work together. One leaks a memory address. The other turns that address into a shell. Either alone is harmless.

Full walkthrough: https://t.co/ugyuDVasqM

Follow @8kSec for more practical security content

[8kSec @8kSec]

@MorenCubed Hi @MorenCubed, thanks for the suggestion, we've shared it with our research team and will consider it for a future blog post!

[8kSec @8kSec]

Patch-diffing CVE-2024-23265 in the AppleDiskImages2 KEXT, the entire iOS kernel fix is one added equality check:
https://t.co/r9gvxluiPV
The methodology covers every function in the KEXT. ipsw pulls kernelcaches from iOS 17.3.1 and 17.4, ipsw's symbolicator names the functions, a Ghidra script dumps every decompiled function, and Meld diffs the pair. One function comes back changed.
Before: it returned -1 as if it were a valid pointer.
After: one added clause if (lVar4 != 0 && lVar4 != -1). Reachable from userland via IOUserClient::externalMethod.
Follow @8kSec for more such iOS kernel research.

[8kSec @8kSec]

7 days left for early bird pricing.

📍 RomHack 2026 | Sept 28 - Oct 1, Rome | Offensive Mobile Reversing and Exploitation for iOS and Android by @8kSec

What's covered across 4 days:

- iOS 26 internals: SPTM, TXM, PAC, PAN, PPL, MTE
- Android kernel: RKP, SELinux, Binder IPC, boot image analysis
- ARM64 static + dynamic analysis: Ghidra, Hopper, IDA Pro, Frida
- Real malware: crypto wallet stealers, accessibility malwares, fresh 2026 samples
- AI + MCP servers for reversing and forensic analysis
- Exploit dev: UaF, heap overflow, anti-debugging bypass
- Audit iOS and Android apps for security vulnerabilities

Includes Corellium access and the OMSE certification.

Early bird ends soon. Seats are limited.

→ https://t.co/b7m4osijXs

[8kSec @8kSec]

Kernel patch diffing, pulling kernelcaches from IPSWs, decompiling KEXTs, and reading bug-fix diffs to understand iOS internals is a workflow we teach end-to-end in our Offensive iOS Internals course. Check out the syllabus here
https://t.co/3AyTjQgihn