Althaf Noushad

#Learn #Practice #Achieve

[Althaf Noushad @FerbAlthaf]

@ldadwda @AnthropicAI No need to wait 7 days you can click switch org and choose the pro one. I just did that and worked

[Althaf Noushad @FerbAlthaf]

@ldadwda @AnthropicAI Select the org which shows pro probably in the cvp page second option

[Althaf Noushad @FerbAlthaf]

@hetmehtaa Malware🙂

[0xfrost @0xfrost]

📌 Kill Flutter
Flutter SSL Pinning Bypass — Android & iOS By f3rb For authorized penetration testing only

🔗Link:https://t.co/DSBkV14KP8

Credit: Althaf Noushad
🔗Link: https://t.co/IeqMHe0DU7

[7h3h4ckv157 @7h3h4ckv157]

Flutter SSL Pinning Bypass

Android & iOS By f3rb For authorized penetration testing only

Resource/Credit: https://t.co/3a4RS4hnM6

[Althaf Noushad @FerbAlthaf]

@7h3h4ckv157 Thanks for sharing my project 🙏🏻

[7h3h4ckv157 @7h3h4ckv157]

Modern offline first Application Security Intelligence Platform for Android, iOS, Flutter and React Native with attack-chain analysis, explainable findings, source exploration, AI-assisted investigation and professional reporting.

Resource/Credit: https://t.co/GpiUjONqfx

[Althaf Noushad @FerbAlthaf]

@7h3h4ckv157 Thanks alot for sharing my project 🩷🙏

[Althaf Noushad @FerbAlthaf]

Built a mobile application security platform from the ground up.
Static analysis for Android & iOS, designed to help security engineers find what matters faster.

Meet Beetle. 🪲
🔗 https://t.co/Q87R5dvg3H

#AppSec #CyberSecurity #Android #iOS #MAST #InfoSec

[Althaf Noushad @FerbAlthaf]

#sslpinning #reflutter #bypass #hack #pentest #hackerone #bugcrowd #bugbounty #mobileapp #frida

[Althaf Noushad @FerbAlthaf]

Flutter apps quietly break most SSL pinning bypasses.

On a recent pentest, reFlutter, Objection, and the usual Frida scripts all failed — zero traffic in Burp.

So I built K!ll Fl!utter 🔪

Automated Flutter SSL bypass, Android + iOS.

🔗 https://t.co/Dd2c8Oo1aa

[Althaf Noushad @FerbAlthaf]

Point it at an APK or IPA → get a ready-to-use Frida script + copy-paste commands.

Works across Flutter versions. Android & iOS.

Open sourced for authorized mobile testing 👇
🔗 https://t.co/Dd2c8Oo1aa

#Flutter #MobileSecurity #Frida #PenTesting

[Althaf Noushad @FerbAlthaf]

K!ll Fl!utter finds the cert-check function fresh in each binary — using fixed BoringSSL string markers + ARM64 addressing, not a hardcoded offset or version table.

It recalculates the offset every time, so the Frida hook lands on any build.

No Ghidra. No manual RE.

[Althaf Noushad @FerbAlthaf]

Why the usual tools fail:

• Objection/SSL Kill Switch hook OS trust APIs — Flutter never calls them
• Frida scripts hook a hardcoded offset — but that offset changes in every Flutter build
• reFlutter needs the version in its table — new builds aren't recognized

[Althaf Noushad @FerbAlthaf]

@nullenc0de @0x0SojalSec Intrested

[Althaf Noushad @FerbAlthaf]

@OutofContestTel @grok check the fact

[Althaf Noushad @FerbAlthaf]

@0xRAYAN7 I tried it, its actually pretty good to confirm vulnerabilities identified in active scans but the only issue that Im facing is once the session got expired we have to scan again, idk is there a option to scan requests from repeater or history directly

[Althaf Noushad @FerbAlthaf]

@hetmehtaa Skill🙂

[Microsoft BlueHat @MSFTBlueHat]

Don't forget to capture a moment at our photo stations! Share your photo and tag us on Twitter/X or LinkedIn for a chance to win an exclusive BlueHat Yeti cup and shopping tote. #BlueHatIndia

[Althaf Noushad @FerbAlthaf]

Attending Microsoft BlueHat India with my fellow hackers.💙💙💙 #hackersalert #bluehatindia #bluehat #BlueHatIndia #MicrosoftBlueHatIndia #MicrosoftBlueHat