Thomas Sutter

Security Researcher

[Natalie Silvanovich @natashenka]

Today, Project Zero released a 0-click exploit chain for the Pixel 9. While it targets the Pixel, the 0-click bug and exploit techniques we used apply to most other Android devices.

https://t.co/tMhM7OFLBp

[Thomas Sutter @Me7e0r]

🎉 Our paper “Relocate and Emulate: Re-Hosting Android’s Application Layer” was accepted at #SANER2026! An early Christmas gift 🎄

https://t.co/g0cUvEQEta

[Sergey Toshin @_bagipro]

New Android host validation bypass technique!

[1/4] All parsed URIs in Android are https://t.co/x8giXOfU0w.Uri.StringUri objects. However, the scheme parser only looks for the ":" delimiter

[Specter @SpecterDev]

I've published a write-up on reversing and analyzing Samsung's H-Arx hypervisor architecture for Exynos devices, which has had a lot of changes in recent years and pretty interesting design. Hope you all enjoy :)

https://t.co/KTJ5IKfSfP

[BEDNAR~1 (Now on @[email protected]) @BednarTildeOne]

Published writeup and exploit for CVE-2022-20452, privilege escalation on Android 13 via Parcel use-after-recycle()

https://t.co/ZQe1kHU3jI

[BEDNAR~1 (Now on @[email protected]) @BednarTildeOne]

Published new writeup, in which I show bypass for Intent validation inside AccountManagerService on Android 13 despite "Lazy Bundle" mitigation

https://t.co/fCSCTaoYlD

[Thomas Sutter @Me7e0r]

SystemUI As EvilPiP: The Hijacking Attacks on Modern Mobile Devices https://t.co/SMiPz6jJ9h via @YouTube

[Thomas Sutter @Me7e0r]

Attacking Debug Modules In The Android Ecosystem https://t.co/tGwUV6ublc via @YouTube

[Mobile Hacker @androidmalware2]

RCE on Xiaomi 13 Pro (CVE-2023-26324)

👉Exploitation:
1) Open URL in WebView
2) Inject JavaScript
3) Execute JavaScript Interface functions from vulnerable GetApps to install & launch payload
4) Get shell

Slides with PoC: https://t.co/7zowt65UIA by @Yogehi @040xZx at #DEFCON23

[Mobile Security @mobilesecurity_]

How to Fuzz Your Way to Android Universal Root: Attacking Android Binder
#MobileSecurity #AndroidSecurity [SLIDES] by @Google
https://t.co/rKB22KZdyo

[Mobile Security @mobilesecurity_]

Becoming any Android app via Zygote command injection
#MobileSecurity #AndroidSecurity by Meta Red Team X
https://t.co/dUhub3fMqY

[Oversecured @OversecuredInc]

Introducing MavenGate: A cutting-edge supply chain attack method for Java and Android apps

Read more: https://t.co/3BiqJkGTun

#android #maven #gradle #mavengate #securityresearch

[Iskuri @Iskuri1]

https://t.co/JbC6NPhrfQ

[Thomas Sutter @Me7e0r]

@VamsiShank53368 If you want to further extend BigMac, I guess you should ask the developer of the tool for some help -> @Digital_Cold

[Thomas Sutter @Me7e0r]

Nice talk about a Android content provider attack for file reading and writing.

Dirty Stream Attack, Turning Android Share Targets Into Attack Vectors https://t.co/MTST6iepED

[Thomas Sutter @Me7e0r]

@VamsiShank53368 Correct, I forked the tool some time ago and gave it a try but soon gave up on it. What are you exactly trying to accomplish? If you just want to extract an Android filesystem you could use unblob instead

[Mobile Security @mobilesecurity_]

New ways to inject system CA certificates in Android 14
#MobileSecurity #AndroidSecurity by ⁦@HttpToolkit⁩ https://t.co/3yhxUYS0SY

[Thomas Sutter @Me7e0r]

@VamsiShank53368 I'm working on a new version of the tool that will make the setup simpler. Currently, the setup is non trivial but with some help you should get it working.

[Thomas Sutter @Me7e0r]

Behind the Scenes: How Criminal Enterprises Pre-infect Millions of Mobile devices: https://t.co/Qhn7EXd7Zd

[Riley Goodside @goodside]

this is wild — kNN using a gzip-based distance metric outperforms BERT and other neural methods for OOD sentence classification

intuition: 2 texts similar if cat-ing one to the other barely increases gzip size

no training, no tuning, no params — this is the entire algorithm: