Mastering Mobile Security! Specialized in iOS & Android exploit development and vulnerability research. Offensive mobile training and Arm64 lab environment
Cens-ational exploit by Dimitrios Valsamaras (@Ch0pin), Ken Gannon / 伊藤 剣 (@yogehi) using djini from Mobile Hacking Lab, Tenia Valsamara (@ir3l14) from CENSUS Labs targeting Google Pixel 10 for a total of $112,500 and 22.50 Master of Pwn points with a 2 bug chain, 1 collision and 1 0-day #Pwn2Own
1 bug wonder! With an Confused Deputy (CWE-441) bug Dimitrios Valsamaras (@Ch0pin), Ken Gannon / 伊藤 剣 (@yogehi) using https://t.co/z03Qse9QVr from Mobile Hacking Lab, Tenia Valsamara (@ir3l14) from CENSUS Labs PwN'ed the Samsung Galaxy S26 #Pwn2Own
سلسلة استغلال حرجة تعتمد على دمج ثلاث ثغرات للسيطرة على هواتف @Samsung، عبر استغلال المساعد الصوتي Bixby، كشفها باحثان من @Microsoft و @MobileHackLab
أصدرت Samsung تحديثات أمنية للتطبيقات المستهدفة، مع الإشارة إلى أن التهديد يظل قائماً في الأجهزة التي تفتقر للتحديثات.
FIRST Ever Online Mobile Hacking Conference
Free, worldwide online event bringing the mobile security community together for sessions on mobile hacking, AI, malware, forensics, live mobile‑focused CTF with prizes!
When: March 3 and 4, 2026
Register here: https://t.co/ZMpCK6E0BQ
😨 From JSInterface bug to 1-click RCE and a 5-figure bounty...
A while ago, our teammate Lyes found a vulnerability in an Android app that eventually earned a 5 figure bug bounty payout.
Finding and validating the full chain manually took ~4 days, which later sparked a simple question. 👇
How much time would this take using https://t.co/gnrTJTK6bX?
In the blog post, Lyes walks through both perspectives.
First, the exploit chain as it was pieced together manually.
Then, how the same risky surface surfaced again when retraced with Djini, but in significantly less time.
👉 Full write-up: https://t.co/51EJylEspE
🚨 https://t.co/kilUqGwEGK IS LIVE!
NEW website. NEW interface.
And NEW crazy subscriptions with complementary MHL courses included!
AI agents now help you:
⚡ static + dynamic testing, automated
⚡ fuzz native interfaces & JNI
⚡ auto-collect evidence + reports - incl. screenshots
⚡ logically click through flows for you
⚡ explore real app behavior (iOS & Android) - Visual Intelligence
Want to win FREE access?
Comment on our LinkedIn launch post 👇
https://t.co/o9pEUKN634