In this Mobile Android Hacking series you will learn how to manipulate Android Apps by adding additional smali code (to get a bind shell and reverse shell) and rebuilding the app, with the help of tools like Java2SMali, AKPTool and Metasploit. At the end you will be able to attach mobile spyware features to any Android App and be able to Access Location, Camera, Mic of any Android Device!

Shannon firmware is a proprietary baseband firmware developed by Samsung for its range of mobile devices. This firmware plays a critical role in managing the baseband processor, which is responsible for all communication functions between a mobile device and a cellular network.

In this article, we will look how to find the correct version of libhwui.so that is vulnerable against CVE-2020-8899. We are looking for the exact version that comes with the Samsung Note 10+ stock firmware. Once we have the libhwui.so, we will use this in the upcoming articles to build our fuzzing harness to identify the same bug.

Explore the mechanics of stack overflow vulnerabilities in our latest blog post. Learn how attackers can manipulate stack overflows to execute arbitrary code despite modern protections like DEP/NX. We delve into advanced bypass techniques such as 'return-to-function' and 'return-to-libc' attacks, providing a deep understanding of these critical security challenges.