Lior Keshet

Security researcher by day. Bug hunter by night.

[Lior Keshet @LiorKesh]

We broke commercial root detection in Android apps 🔓📲

We targeted sensitive apps - finance, security, government - which use commercial protections.
We got them running on rooted devices.

That gave us full control to modify app behavior however we wanted.
👇

[Lior Keshet @LiorKesh]

Our team participates in public bug bounty programs to sharpen our vulnerability research skills.

We recently looked at Firedancer, a blockchain validator client, and found a remotely triggerable vulnerability.

https://t.co/7hi19uyWDB

[Immunefi @immunefi]

Congrats to security researcher Liork (@LucidBitLabs) for earning $50,000 from a blockchain/dlt High vulnerability.

They're now ranked 83rd on the all-time leaderboard.

Pledge IMU behind them so that when they find new bugs and increase their rank, you both get IMU rewards.

https://t.co/ZOO3mHfEwp

[Lior Keshet @LiorKesh]

3/ A second vulnerability

[Lior Keshet @LiorKesh]

1/ Our team at @LucidBitLabs recently audited a crypto wallet app.

We found 2 impactful vulnerabilities 👇

[Lior Keshet @LiorKesh]

4/ Read the full post here - https://t.co/j8sY1gmGpS

[Lior Keshet @LiorKesh]

@LucidBitLabs @k33p_R3AL

[LucidBitLabs @LucidBitLabs]

We audited a mobile crypto wallet and found impactful vulnerabilities.
Check out the research here - https://t.co/yYL5LmZeMi

[Immunefi @immunefi]

Incredible.

Security researcher Liork (@LucidBitLabs) just earned $100,000 for their first ever report on Immunefi.

Oh, and this report earned Liork some pretty big Hunt Points, too.

[Lior Keshet @LiorKesh]

@nyamabites The module is custom for the specific apps we targeted, so it isn't generally useful. Due to legal concerns, we are not able to share it

[Lior Keshet @LiorKesh]

We broke commercial root detection in Android apps 🔓📲

We targeted sensitive apps - finance, security, government - which use commercial protections.
We got them running on rooted devices.

That gave us full control to modify app behavior however we wanted.
👇

[Lior Keshet @LiorKesh]

Finally, we built a persistent module, and got the apps cleanly running on the rooted device across reboots, updates, reinstalls - no adb needed.

Read the full writeup here - https://t.co/eOVV5MpVUc

[Lior Keshet @LiorKesh]

We reverse-engineered the apps, bypassing anti research protections.

We pinpointed critical 'decision points' in which the app determines whether its safe to run or not.

By hooking these points, we got the apps running happily on rooted devices

[Denis Laskov 🇮🇱 @it4sec]

DJI drone security analysis: reverse engineering communication, firmware extraction, and fuzzing for vulnerabilities. 𖥂🎮 ၊၊||၊ 💥

More details on:
LinkedIn: https://t.co/162VDMNzmc
Substack: https://t.co/EPVwWcPRfJ

[Lior Keshet @LiorKesh]

At @LucidBitLabs, we broke commercial root detection in apps with top-tier app protections in place (RASP).

Full write up - https://t.co/eOVV5MpVUc

[Dataflow Security @dfsec_com]

Our new blog post is live: https://t.co/8bikPTaZfn

[offensivecon @offensive_con]

#OffensiveCon25 videos are now up!

https://t.co/aRzmXS7iPA

[J @Morpheus______]

"DisARMing" code - an exploration into systems programming, #debugging & #reverseEngineering on #Linux/#Android/#Darwin and #Aarch64! 510+ pages #book in COLOR(!)

https://t.co/IJdPuGsVAa for details, because there's more to detail than the margins of a Twitter message can hold.