Gautam Arvind

Security Researcher

[Edu Novella @enovella_]

Syscall Tracer🔥🔥
Sometimes it’s useful to observe the system calls happening inside a given target process. Especially if the target includes some kind of Frida detection, root detection, or any other kind of Runtime Application Self-Protection (RASP).
https://t.co/IEl1hTmPjV

[FatalSec @SecFatal]

#RootlessJailbreak #Detection #Dopamine
We explore 10 real-world iOS detection techniques apps use to detect rootless jailbreaks like Dopamine — from XPC tricks to filesystem checks.
We built a Frida script to dynamically work around each one!
Watch now: https://t.co/Nghh3vDgg3

[Govind Sharma @ApkUnpacker]

Introducing https://t.co/NghsaMWaBM, a lightweight Android library designed to detect signature bypass capabilities commonly used by tools such as MT Manager, NP Manager, LSPatch, and others. Enhance app's security by preventing unauthorized modifications. #AndroidSecurity

[LiveOverflow 🔴 hextree.io @LiveOverflow]

Ever wondered how iPhones can be hacked remotely?

Watch my latest YouTube video right here on Twitter. My goal with this video is to give you a sense of the insane amount of skill and (engineering) effort that is required to find vulnerabilities in iPhones.

At the end of the video, I hope you’ll appreciate the complexity of the task, while realising it’s not simply magic.

[FatalSec @SecFatal]

#radare2 #syscalls #staticanalysis #androidsecurity #reverseengineering

Quick Tip: Uncovering SVC Instructions with Radare2! https://t.co/hIMiw4dloh

@mobilesecurity_ @radareorg

[Edu Novella @enovella_]

Do you like reversing Android protected apps and automation?

Help wanted! Grab a sample and pull-request a rule for APKiD :) 😎

https://t.co/a178wh7Anf

#APKiD #RedNaga #Android #Packers #Protectors #RASP #reverseengineering

[Hex-Rays SA @HexRaysSA]

We’ve been cooking a fantastic new IDA Pro Training Program, and it is now available on our website! Check the schedule and register today 🌐 https://t.co/zv5nIlbuL2

#LearnIDA #idapro

[Dimitri Os @Ch0pin]

This is such a amazing tool, give it a try if you haven't already:
https://t.co/GzdG05quJU

[8kSec @8kSec]

Utilize writers for different CPU architectures. X86Writer for X86 and Arm64Writer for AArch64 CPU architecture - https://t.co/HRRMqONNuI Follow us to know more! #Frida #iOSsecurity #AdvancedTech #MobileSecurity #CyberSecurity #MobileSecurity

[Mobile Security @mobilesecurity_]

Attacking iOS
#MobileSecurity #iOSsecurity
https://t.co/UnD6bEJlK4

[Synacktiv @Synacktiv]

To facilitate reverse-engineering of large programs, vulnerability research and root-cause analysis on iOS, Android, and other major platforms, @myr463 and @Hexabeast released Frinet, a tool combining Frida with an enhanced version of Tenet.
https://t.co/d0epwjylji

[Edu Novella @enovella_]

New release of APKiD is out! - "BlackHat USA 2023 Edition" 🎉. Changelog: https://t.co/9WzGiiojbY

If you're attending @BlackHatEvents, come and say hi! 😇https://t.co/rfsaW1YaWM

//cc 🐧 @caleb_fenton @timstrazz @cryptax @FrenchYeti

[FatalSec @SecFatal]

#sslpinning #frida #mitm #android
New video up on YouTube showcasing the concepts of SSL pinning and how to bypass different types of SSL pinning in android.
@fridadotre @mobilesecurity_

https://t.co/ORd8whIlbR

[FatalSec @SecFatal]

#hookdetection #integritychecks #r2pay #androidsecurity
New video on bypassing hook integrity checks in R2Pay app.
Thanks for creating this challenge. @darvincisec @enovella_
https://t.co/ALqAGp8iqM

[Ahmet Bilal Can 🦔 @0xabc0]

Hex-Rays @HexRaysSA released a tool to simplify mba expressions but no published blog right now.
".. achieve orders-of-magnitude better performance than existing state-of-the-art solutions." (looking at you d810 😆)
https://t.co/Sl5WbYrSe2

[Gautam Arvind @darvincisec]

@SecFatal @enovella_ @fridadotre Awesome! Keep it up

[FatalSec @SecFatal]

Uploaded a new video where we have tried to explain few techniques for bypassing frida using frida itself. For explaining these techniques, we have used r2pay android app from MSTG crackme.
@enovella_ @fridadotre
#frida #antifrida
https://t.co/P3MusZdTct

[Romain THOMAS @rh0main]

Here are some slides and hands-on about Linux x86-64 reverse engineering:

https://t.co/1UjvzYS4GK

[Somdev Sangwan @s0md3v]

what a great read.

https://t.co/60jahJx2D8

[Romain THOMAS @rh0main]

It's a pleasure to announce the release of open-obfuscator: a free and open-source solution
for obfuscating Android and iOS applications (Java/Kotlin, C/C++/Objective-C)

https://t.co/nBYleNkcdA

https://t.co/epzNK1fqKW