No permissions. No root. Just pixels.
Pixnapping-style attacks (CVE-2025-48561) can leak what’s displayed by other Android apps. We recreated the attack + tested mitigations devs can apply now —> https://t.co/3oyVT3G3zz
#AndroidDevelopers#SecurityResearch#AppSecurity
#android and #ios apps that handle sensitive data are a primary focus of reverse engineering and tampering attacks. Hear from #OWASP corporate member @Guardsquare on how to comply with MASVS-RESILIENCE requirements. https://t.co/CFGTlOPvmH #mobileappsecurity@OWASP_MAS
The Accessibility Service on Android is an impactful feature for people with disabilities. However, it also comes with security risks. Here, you can learn how to protect against them: https://t.co/1EbcSnOUcY
#MobileAppSecurity#Accessibility#CyberSecurity
In the final blog of our Flutter app reverse engineering series, we look at how classical attacks apply to Flutter apps. Follow along as we investigate using techniques like code patching and hooking for cheating: https://t.co/ksODLAa8qj
#reverseengineering#Flutter#FlutterDev
The Guardsquare team met in Leuven to celebrate the 20th Anniversary of ProGuard and 10 years of DexGuard protecting #Android applications. See how we're continuing the #ProGuard20 celebrations with the @grdsqrcommunity: https://t.co/SXFRGwKvub
Introducing Decompiler Explorer. A free decompilation service service funded by @vector35 and @HexRaysSA and jointly developed by @vector35 and @angrdothorse https://t.co/8CQjv1OyCT
Compiler Explorer @CompileExplore now has an llvm optimization pipeline viewer <https://t.co/665fWdomU9>! Thanks @partouf for the code review and help getting it production ready
Our latest blog post continues our deep dive into Flutter app security. We explored 3 obstacles holding back decompilation of Dart code, how reverse engineers could overcome them, and future security implications: https://t.co/uS0R8cCtgj
#ReverseEngineering#Flutter#FlutterDev
Flutter is rapidly gaining popularity as a framework to develop mobile apps. We investigated the current situation of reverse engineering #Flutter apps, the available tooling, and where things are headed in the future: https://t.co/tvXo0iiU9G
#reverseengineering#FlutterDev
Data flow analysis of Java bytecode has been approached by various tools in different ways. Read our latest post to make sure you don't get lost among DFA tools and to learn about ProGuardCORE’s new DFA feature: https://t.co/f4Nr0YEwzo
#java#jvm
rellic-xref is our new interactive web interface for Rellic that displays your original LLVM modules and the decompiled C code side-by-side. Try it out and let us know what you think! https://t.co/p4WWt8dUVS
This took a long time, huge kudos to @_S0nn1_ for the immense effort and resilience. This paper is about eval and comparing various binary function similarity papers, many of which with a touch of ML; the (re-)implementation will be open sourced, as well as the datasets!
Nice comparison of binary rewriters by @trailofbits and @GrammaTech in ‘Binary Lifter Evaluation’; https://t.co/qO0aw8xwpf
Would be interesting to benchmark even more of the #LLVM IR based approaches.
In other news, I've recently put together a big state of the art regarding symbolic execution techniques used in system research. Check out the slides here! 1/2 https://t.co/BsQEeTHyxd
@_dmcyk Thanks for all the amazing ideas and contributions to both our #llvm code base and Guardsquare as a whole! Wish you all the best with the new role 👏
Yesterday the team released AppSweep!
Mobile app scanning aimed at #AppDev ‘s through intuitive navigation, insightful & actionable findings,… Using #ProGuard static analysis to identify an initial set of common security issues.
Free, so try it out 🚀
#devops#mobilesecurity
Announcing AppSweep, mobile #appsec scanning for developers.
Scan android apps to identify and address security risks early in the dev process. AppSweep’s security scanning has an intuitive UX and provides actionable, technical feedback.
https://t.co/si39r1Hx8H
#androiddev
Looking for #cpp/compiler engineers for our #LLVM team @Guardsquare🇧🇪 to work on LLVM-based #obfuscation. Involves: code transforms/injection, binary instrumentation, anti-cheat etc. Keeping up with the newest RE techniques and code hardening research
https://t.co/tRx0A8BM8L
With our @Unity3d partnership, we look forward to helping the developer community prevent cheating, piracy, unauthorized modification, player data spoofing and more: https://t.co/Du4mdfa80s
#gamedev#gamedevelopment#unity3d#appsec
Did you know that LLDB can be used to symbolicate #iOS crash reports?
In our latest blog post we show how it is done, and how using LLDB can help you overcome some of the pitfalls of Xcode’s crash reporting.
https://t.co/WXZUz14XjD
#iosdev#xcode#appledev#appdev