Interact with Frida devices, processes, and scripts directly from your browser. - adityatelange/frida-ui

my journey in intercepting HTTPS traffic from a APK based on Flutter

Cyble analyzed deVixor, an advanced Android banking RAT with ransomware features actively targeting Iranian users.

Over the past few years, several AI-powered features have been added to mobile phones that allow ...

With the advent of a potential Dolby Unified Decoder RCE exploit, it seemed prudent to see what k...

While our previous two blog posts provided technical recommendations for increasing the effort re...

WhisperPair is a family of practical attacks leveraging a flaw in the Google Fast Pair implementation on flagship audio accessories.

WPair is a defensive security research tool that demonstrates the CVE-2025-36911 (eg WhisperPair) vulnerability in Google's Fast Pair protocol. This vulnerability affects millions of Blueto...

Robust Frida-based tool to dump decrypted iOS apps as .ipa from a jailbroken device supports App Store, sideloaded and system. - lautarovculic/frida-ipa-extract

Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows - trailofbits/skills

I’ve spent the last couple of days trying to turn my S23 Ultra into the ultimate mobile hacking machine.

A Frida-based utility for dynamically extracting native (.so) libraries from Android applications. - TheQmaks/soSaver

ESET researchers discover an Android spyware campaign targeting users in Pakistan via romance scam tactics, revealing links to a broader spy operation.

An Android trojan distributed via a Deutsche Bank phishing campaign pretends to be “Support Nexi,” prompts victims to tap their payment card and enter the PIN, then exfiltrates NFC data over a WebSocket. We attribute this cluster as NFCShare and provide technical…

IPIDEA’s proxy infrastructure is a component of the digital ecosystem leveraged by a wide array of bad actors.

true