Govind Sharma

Mobile Security Engineer @ Thales | Frida | Radare2 | Android ɹǝǝuıƃuǝ ǝsɹǝʌǝᴚ, Android/iOS Dynamic and Static analysis, Vulnerability Research, RASP Bypass.

[FrenchYeti @FrenchYeti]

📢 Pick a chance to discover @_reversense_ internals⚔️, the logical - open source pro grade - suite of #Dexcalibur. A re-engineering automation platform for mobile & embedded binaries or system. The union of devices, dynamic stuff, @fridadotre , decompilers (@radareorg, ..) with a clean UI.
@enovella_ @xMagass @0xabc0 @EmericNasi #android #owasp #mobilesecurity

[radare @radareorg]

r2mcp 1.8.2 is out, relevant changes are:

- http server mode from the r2 plugin
- more tool tags like exec and session
- bearer token auth for multi agent support
- improved regex and filtering capabilities for large outputs
- new run_script tool

https://t.co/y1nW7UeSJd

[Zion Leonahenahe Basque @mahal0z]

For years, Rust binaries made reversing a nightmare. Modern decompilers only support C, lacking meaningful types, constructs, and language-specific functions. Led by @34r7hm4n, we're releasing our S&P work Oxidizer, the first deep Rust decompiler, built on angr!

Interested? 🧵👇

[radare @radareorg]

The first release of r2unity is out! https://t.co/0WOMcvcVh4

[Abhi @AbhiTheModder]

People said it couldn't be done

Built Frida natively on Termux. No NDK, no cross-compilation. Took 2 years of failed attempts, 12 Android-specific patches, and a vacation without my laptop to figure it out.

https://t.co/84Bd8taCSg

[malware Owl @malware_owl]

YaraXGUI Improvements

HexEditor, Yara Match Table to show all matches found. It supports more tab, yara formatting fixed as well. We can browse for rules and filter files that we want to scan this time. Hex editor is added with the goal to make it more hassle free.

Within the hexeditor, we can also apply changes, do basic diffing, mark multiple regions and send to YARA editor. Also included a way to select multiple regions and gaps within each regions can be set a wildcard so we do not need to calculate each size.

Can now do disassembly of selected region (capstone), draw basic CFG to do quick checks (maybe for certain obfuscation technique or unique code blocks). Simple parsing for PE and ELF file.

Added a wonky and (not-so-reliable) autocomplete (NOT based off parser) but good enough I guess for my workflow).

To try the new version: https://t.co/hrTWvxatgY

[radare @radareorg]

Iaito 6.1.4 is out! 💥

Tons of stability improvements, new widgets, userfriendly features, brings back the debugger mode, display analysis progress and background webserver ideal for r2mcp.

Full changelog https://t.co/w4KwEZbuUO #reverseengineering
#radare2

[Abhi @AbhiTheModder]

It’s finally here: radare2 + Warp (warrp) ⚡️

This makes r2 the first tool outside of the binary ninja ecosystem to adopt the format. Huge thanks to Mason (from @vector35) and @trufae (@radareorg) for their invaluable feedback's during development.

https://t.co/wFuzChcMvq

[Edu Novella @enovella_]

After another year, another release:
APKiD v3.1.0 - "AbhiTheModder" edition.

Hats off to @AbhiTheModder who did all the tough work!

📃 Changelog: https://t.co/BuzsxlHQy7📷 Pypi package: `$ pip install --upgrade apkid`

#Android #RASP #PEiD #Obfuscation #mobilesecurity

[Frida @fridadotre]

Frida 17.9.0 & frida-tools 14.8.0 are out 🎉

Hide your frida-server in plain sight 👀

./frida-server --listen=unix:no-rasp-gonna-find-me-here
frida-ps -U "--device-option=control-endpoint=(string)unix:no-rasp-gonna-find-me-here"

iOS: same idea, but `tcp:x` only

[Asher Davila @Asher_Davila]

I've open sourced my #radare2 Python script for parsing .gopclntab and recovering function symbols from Go binaries, including fully stripped ones. Supports ELF, Mach-O, and PE across Go versions 1.2, 1.16, 1.18, and 1.20+

https://t.co/gQbZwYG3I0

I hope you find it useful.

[Edu Novella @enovella_]

Syscall Tracer🔥🔥
Sometimes it’s useful to observe the system calls happening inside a given target process. Especially if the target includes some kind of Frida detection, root detection, or any other kind of Runtime Application Self-Protection (RASP).
https://t.co/IEl1hTmPjV

[malware Owl @malware_owl]

Finally done with tweaking jsdeob-workbench and I think it is better in terms of user experience now. Not totally, but still good enough, I guess. Here is the link to the repository!

https://t.co/QQYaLHRPgC

Another demo :

https://t.co/aTNmzwlzcS

[Frida @fridadotre]

Frida 17.6.0 🎉

• Major Android stability improvements
• Zygote instrumentation reworked (ptrace-free, external)
�� No more system_server injection
• Android 16 supported
• New frida-tools release

Details in the release notes 👇

[Abhi @AbhiTheModder]

@radareorg r2web now has better support (& UI) for Function graphs, Hex view and more... 🤘

[Huy Nguyen @Little_34306]

Just public the source code for the bot. You can host your own telegram bot to decrypt iPA even on iOS 26 app

https://t.co/l7CIExhcvr

[Huy Nguyen @Little_34306]

I'll open source a bot that can decrypt app on iOS 18-26. It supports app > 2GB (by userbot) and only support Vietnam Appstore atm

Require 1 device on iOS 14 with trolldecryptjb cli (included later)

Tele API for upload is limited so it's a lil bit slow

https://t.co/k9PgmFfHOu

[Natalie Silvanovich @natashenka]

Today, Project Zero released a 0-click exploit chain for the Pixel 9. While it targets the Pixel, the 0-click bug and exploit techniques we used apply to most other Android devices.

https://t.co/tMhM7OFLBp

[☠ Dani Martinez ☠ @dan1t0]

I wired @opencode free models (thanks!) into @radareorg MCP + r2ghidra and got surprisingly good assisted reversing. Then I Dockerized it and built a Telegram bot with two prompt agents (sec analysis, crackmes).

Post: https://t.co/A4FI6zMqcx
Code: https://t.co/fSxjsBYCIQ

[Edu Novella @enovella_]

Ringzer0 COUNTERMEASURE SPRING//2026 training is around the corner🤠

Our training, MOBILE REVERSE-ENGINEERING WITH RADARE2 & FRIDA 📲🛠️, will be **FULLY** virtual.

Save the dates: 22nd-31th March 2026

Early bird tickets:
https://t.co/ghVON7ITlk

/cc @_ringzer0 @CorelliumHQ