tags/reverse-engineering
Tag: Reverse engineering
0x001C[MOB]Android ARM64 initializers: relocations and JNI timing9 min0x001B[MOB]Android trust: modules, root stores and process views9 min0x001A[BIN]CCleaner's helper: socket access versus task authorization6 min0x0019[MOB]CVE-2025-24200: USB policy and lock-state authorization8 min0x0018[WEB]CVE-2024-2961: iconv writes and PHP object lifetimes8 min0x0017[MOB]Android's two layers: DEX, DGC, and method restoration8 min0x0016[BIN]Hyper-V IUM: locating the guest debugging context8 min0x0015[BIN]Windows tokens: creation, impersonation, and actual access8 min0x0014[MOB]XNU PAC: context switches and thread-state authentication7 min0x0013[MOB]ARM64 KPTI: roots, ranges, and exception entry6 min0x0012[WEB]DNS Beacon: fragment reassembly and ciphertext authentication7 min0x0011[MOB]KTRR and CTRR: ranges and lockdown order7 min0x0010[MOB]iOS PPL: entry state and physical-page ownership8 min0x000F[WEB]DCSync and DCShadow: RPC context determines the alert8 min0x000E[BIN]x86 shellcode: hidden assumptions in a ROR13 resolver8 min0x000D[BIN]WdNisDrv: flow contexts and device-access boundaries9 min0x000C[BIN]CVE-2021-24086: nested IPv6 reassembly and a null write8 min0x000B[MOB]Android emulators: task lists and kernel relocation anchors8 min0x000A[BIN]MSVC XFG: from type encoding to call-site hashes8 min0x0009[BIN]CVE-2020-16898: an eight-byte RDNSS boundary mismatch7 min0x0008[MOB]iOS Flutter: verify routing and TLS as separate boundaries7 min0x0005[MOB]checkm8: where a stale DFU pointer meets USB callbacks6 min0x0003[MOB]Flutter ARMv7 traffic: separate routing from TLS verification9 min0x0002[MOB]Finding obfuscated OkHttp pinning through parameter types6 min0x0001[MOB]Android runtime restrictions: namespaces and Hidden API8 min