+Ch0pin🕷️ – Medium

+Ch0pin🕷️

Fuzzing Android binaries using AFL++ Frida Mode

You might find this to be a fitting prologue to my earlier post on Creating and using JVM instances in Android C/C++ applications… and you…

May 14, 2024

Fuzzing Android binaries using AFL++ Frida Mode

May 14, 2024

Ghost files in the shared preferences

Have you ever encountered an exceptionally clever bug, only to be thwarted by an unforeseen obstacle just moments before exploiting it…

Feb 18, 2024

Ghost files in the shared preferences

Feb 18, 2024

Get an email whenever +Ch0pin🕷️ publishes.

By signing up, you will create a Medium account if you don’t already have one. Review our Privacy Policy for more information about our privacy practices.

Medium sent you an email at to complete your subscription.

Creating and using JVM instances in Android C/C++ applications

Considering the reader’s interest in this post, it’s reasonable to assume a certain level of familiarity with JNI and its usage. For those…

Aug 30, 2023

Creating and using JVM instances in Android C/C++ applications

Aug 30, 2023

Wireless pairing and device mirroring in Android Studio

Having your mobile devices cable-connected can be challenging sometimes.

Mar 1, 2023

Wireless pairing and device mirroring in Android Studio

Mar 1, 2023

Practical ARM64 (Subroutines)

Calling subroutines in higher level programming languages is trivial, the developer has simply to reference the name of a subroutine, give…

Aug 26, 2022

Practical ARM64 (Subroutines)

Aug 26, 2022

Practical ARM64 (selections and loops)

So far we went trough the most important instructions of the AArch64 instruction set and it is time to move to something more practical. In…

Aug 16, 2022

Practical ARM64 (selections and loops)

Aug 16, 2022

ARM 64 Assembly Series — Data Processing (Part 2)

Previous posts: Basic definitions and registers, lab setup, offset and addressing modes, Load And Store, Branch, Data Processing Part 1

Aug 4, 2022

ARM 64 Assembly Series — Data Processing (Part 2)

Aug 4, 2022

ARM 64 Assembly Series — Data Processing (Part 1)

Previous posts: Basic definitions and registers, lab setup, offset and addressing modes, Load And Store, Branch

Aug 1, 2022

ARM 64 Assembly Series — Data Processing (Part 1)

Aug 1, 2022

ARM 64 Assembly Series — Branch

Previous posts: Basic definitions and registers, lab setup, offset and addressing modes, Load And Store

Jul 21, 2022

ARM 64 Assembly Series — Branch

Jul 21, 2022

ARM 64 Assembly Series — Load and Store

Previous posts: Basic definitions and registers, lab setup, offset and addressing modes

Jul 14, 2022

ARM 64 Assembly Series — Load and Store

Jul 14, 2022

ARM 64 Assembly Series — Offset and Addressing modes

Lab Set up

Jul 8, 2022

ARM 64 Assembly Series — Offset and Addressing modes

Jul 8, 2022

ARM 64 Assembly Series— Basic definitions and registers

Main Definitions

Jun 21, 2022

ARM 64 Assembly Series— Basic definitions and registers

Jun 21, 2022

Published in
InfoSec Write-ups

The toddler’s introduction to Heap Exploitation, House of Lore(Part 4.5)

Similarly to other heap exploitation attacks that we saw so far, the idea behind the House of Lore (HoL) is to trick malloc to return a…

Jun 6, 2022

The toddler’s introduction to Heap Exploitation, House of Lore(Part 4.5)

Jun 6, 2022

Pending Intents: A Pentester’s view

Few days ago I came across an interesting case of vulnerability posted at the AndroidInfoSec’s facebook page. Since there are not many…

May 31, 2022

Pending Intents: A Pentester’s view

May 31, 2022

Published in
InfoSec Write-ups

The toddler’s introduction to Heap Exploitation, House of Spirit(Part 4.4)

Please let me know, if I start to sound weird….

May 20, 2022

The toddler’s introduction to Heap Exploitation, House of Spirit(Part 4.4)

May 20, 2022

Published in
InfoSec Write-ups

The toddler’s introduction to Heap Exploitation, Unsafe Unlink(Part 4.3)

Exploiting a heap overflow vulnerability is not always straightforward. Between else, the allocator imposes various checks during the chunk…

May 7, 2022

The toddler’s introduction to Heap Exploitation, Unsafe Unlink(Part 4.3)

May 7, 2022

Published in
InfoSec Write-ups

The toddler’s introduction to Heap Exploitation, FastBin Dup Consolidate (Part 4.2)

In this post we are going to trigger a FastBin consolidation which we are going to combine with a double free vulnerability (dup) in order…

Apr 13, 2022

The toddler’s introduction to Heap Exploitation, FastBin Dup Consolidate (Part 4.2)

Apr 13, 2022

Published in
InfoSec Write-ups

The toddler’s introduction to Heap Exploitation, FastBin Dup to Stack (Part 4.1)

This post is part of a series of articles related to x64 Linux Binary Exploitation techniques. In my previous posts, I started by exploring…

Apr 11, 2022

The toddler’s introduction to Heap Exploitation, FastBin Dup to Stack (Part 4.1)

Apr 11, 2022

Dissecting the Escobar bot

The com.escobar.pablo is yet another banking Trojan which, between else abuses the Android’s Accessibility Service (a11y in short) in order…

Apr 6, 2022

Dissecting the Escobar bot

Apr 6, 2022

Published in
InfoSec Write-ups

The toddler’s introduction to Heap exploitation, Use After Free & Double free (Part 4)

This post is part of a series of articles related to x64 Linux Binary Exploitation techniques. Summarising on my previous posts, we began…

Mar 31, 2022

The toddler’s introduction to Heap exploitation, Use After Free & Double free (Part 4)

Mar 31, 2022

+Ch0pin🕷️

+Ch0pin🕷️

https://www.linkedin.com/in/valsamaras/, developer of https://github.com/Ch0pin/medusa, follow me on twitter https://twitter.com/Ch0pin

Following

Help
Status
About
Careers
Press
Blog
Privacy
Terms
Text to speech
Teams