Rahul Kankrale

Security Engineer at @CRED_club | In love with android/iOS security
#bugbounty #infosec #cybersecurity #internetthreats

[Android Developers @AndroidDev]

📣 Sideloading is here to stay.

Users will be able to install apps from unverified developers via a new advanced flow, which includes safeguards that stop scammers and maintain choice.

Learn more about how Android developer verification is evolving → https://t.co/eQWedAMc4t

[Project Zero Bugs @ProjectZeroBugs]

A 0-click exploit chain for the Pixel 9 Part 1: Decoding Dolby https://t.co/7n6n1uSKRD

[CFC4N @CFC4N]

🚀 eCapture v1.5.0 Released!

Capture SSL/TLS plaintext without CA keys using eBPF.

⚙️ Remote Config API: Hot-reload rules via HTTP without restarting. 📡 Event Forwarding: Stream data to tools like Burp Suite via WebSocket/Protobuf. 📱 Android 16 Support
https://t.co/ZHqD4u1P8u

[Android @Android]

Sharing moments shouldn’t depend on the phone you have. Starting today with the Pixel 10 family, Quick Share now works with AirDrop, making secure file transfers between Android phones and iPhones more seamless. This builds on our commitment to cross-OS compatibility to bridge the gap between ecosystems. 

We built this feature with security top of mind from day one.

Learn more ↓

https://t.co/I6iarYxQvL

[Sameer Samat @ssamat]

1/6 Keeping users safe on Android is our top priority. Today, we’re sharing an update on our new developer verification requirements – why they are critical to fighting modern scams, and how we’re adjusting our approach based on community feedback. 👇

[Frida @fridadotre]

Frida 17.4 introduces Simmy, a new backend for Apple’s Simulators on macOS.

Spawn, attach, and instrument apps — just like on a real device.

[Sapra @0xsapra]

Yay, I was awarded a $10,000 bounty on
@Hacker0x01

! Reported a critical RCE on adobe coldfusion (CVE-2024-41874) 🥳📷 together with @MrHritik @a0xnirudh

you can read the advisory @ https://t.co/t1MWhtQ65w

#togetherwehitharder #BugBounty

[Sergey Toshin @_bagipro]

[1/4]
If you have an Android app that you really want to reverse, but all constants are obfuscated, this advice may save tons of time

[LiveOverflow 🔴 @LiveOverflow]

A while ago I was able to talk with @_bagipro about Android app bug hunting - specifically about his experience with the Google VRP program.
He also shows us the coolest Android app vulnerability I have ever seen!
https://t.co/9K1dxNu4xo

[TyphoonCon🌪️ @typhooncon]

🌪️Now on stage @typhooncon 2023 "Be cautious! Your conversations might be secretly recorded" by @RahulKankrale

[TyphoonCon🌪️ @typhooncon]

🌪️ "Be cautious! Your conversations might be secretly recorded" will be presented by @RahulKankrale at #TyphoonCon23!

Learn more and get your tickets: https://t.co/yb3hKu6J1E

[TyphoonCon🌪️ @typhooncon]

"Be cautious! Your conversations might be secretly being recorded" will be presented by @RahulKankrale at #TyphoonCon23!

[LaurieWired @lauriewired]

Happy to announce the release of my JADX dynamic scripting plugin, JADXecute. Now you write and share scripts to automate your Android APK analysis! #ReverseEngineering

https://t.co/J3cNWZ1lBT

[Rahul Kankrale @RahulKankrale]

Access Twitter blue features using deeplink without a subscription.

https://t.co/MRhZxA5s1d

#TwitterBlue #mobilesecurity

[Akshansh Jaiswal @Akshanshjaiswl]

📢 Attention Bangalore and nearby bug bounty-hunting community! 🇮🇳
Come join us for the HackerOne Ambassador World Cup 2023 competition starting Mid March and showcase your skills! 🏆
Do reach out if you're interested and be a part of this exciting event! 🤩 #bugbounty #hackerone

[InfoSec Community @InfoSecComm]

Featuring articles by @samwcyo, @sid0krypt, @LogicalHunter, @Anugrah SR, @RahulKankrale, @harshbothra_, @ADITYASHENDE17, @yaseenzubair

Trending threads by @0xManan, @thecybertix, @maikroservice, @hacker_ ,@CristiVlad25, @DhiyaneshDK

[Rahul Kankrale @RahulKankrale]

This vuln could have able to disabled all receiving messages of #instagram user.

https://t.co/kAHwxy8seg

#bugbounty #vulnerability #facebook #android #mobilesecurity

[David Schütz @xdavidhu]

I found a vulnerability that allowed me to unlock any @Google Pixel phone without knowing the passcode. This may be my most impactful bug so far.

Google fixed the issue in the November 5, 2022 security patch. Update your devices!

https://t.co/LUwSvEMF3w

[Rahul Kankrale @RahulKankrale]

@_TheSecurityGuy It is active, https://t.co/TEWPkGZm1e

[Rahul Kankrale @RahulKankrale]

CVE-2022-22292

Start Arbitrary Activity App Components as the System User by Ryan Johnson

https://t.co/rZgGZw3rl2

#BlackHat
#android #samsung #vulnerability #bugbounty #mobilesecurity