Shannon firmware is a proprietary baseband firmware developed by Samsung for its range of mobile devices. This firmware plays a critical role in managing the baseband processor, which is responsible for all communication functions between a mobile device and a cellular network.

In this article, we will look how to find the correct version of libhwui.so that is vulnerable against CVE-2020-8899. We are looking for the exact version that comes with the Samsung Note 10+ stock firmware. Once we have the libhwui.so, we will use this in the upcoming articles to build our fuzzing harness to identify the same bug.

Explore the mechanics of stack overflow vulnerabilities in our latest blog post. Learn how attackers can manipulate stack overflows to execute arbitrary code despite modern protections like DEP/NX. We delve into advanced bypass techniques such as 'return-to-function' and 'return-to-libc' attacks, providing a deep understanding of these critical security challenges.

In this article we are going to dive into Libprotobuf structure-aware fuzzing to learn how to perform fuzzing against functions that accept only complex data types likes Structures, Classes or other structured data.

In this blog post we will explore a clever technique that leverages format string vulnerabilities to bypass ASLR by leaking crucial information about memory addresses and Exploit the Damn Exploitable Android App.

In this article, we will explore two powerful techniques, dynamic analysis using Frida and reverse engineering using Ghidra, to uncover and address bugs and security loopholes in Android application native libraries.

In this blog post we will learn how to setup a basic lab environment in order to do reverse engineering and learn how to build an exploit for the Damn Exploitable Android App.

Capture the Flag event Mobile Hacking Lab: Damn Exploitable Android App is specifically build for beginners to dive into the world of mobile security research and mobile exploit development. Using the challenge you can up-skill yourself for free!