@cryptax – Medium

@cryptax

@cryptax

Using AI-assisted decompilation of Radare2

A few months ago, Radare2 (aka r2), an open source disassembler which can be entirely used by command line, started implementing AI plugins…

15h ago

Using AI-assisted decompilation of Radare2

15h ago

@cryptax

Dart shifts to standard calling convention

Up until Dart SDK v3.4.0, Dart was using an uncommon calling convention where all arguments for a function were passed on the stack [see my…

Jul 19

Dart shifts to standard calling convention

Jul 19

@cryptax

Untangling Android/TangleBot

We dig in a malicious sample of Android/TangleBot of May 2024. TangleBot is also reported as a BankBot, although it is more an Android RAT…

Jul 12

Untangling Android/TangleBot

Jul 12

@cryptax

On the security of Google Secrets

Google Secrets Gradle plugin is “for providing your secrets securely to your Android project”. I would like to make it clear in this…

Jul 11

On the security of Google Secrets

Jul 11

@cryptax

Inside Sinchat Flutter riskware

In this blog post, we analyze 2 borderline Flutter apps. As I’ll explain in conclusion, they are not malicious but expose borderline/risky…

May 24

Inside Sinchat Flutter riskware

May 24

@cryptax

Testing Restricted Settings of Android 13 on an emulator

Android 13 introduced a new security measure called “Restricted Settings”. The measure is meant to limit access to notification settings…

Apr 4

Testing Restricted Settings of Android 13 on an emulator

Apr 4

@cryptax

Phishing attempt on French e-tolls

Yesterday, I received a well-crafted phishing attempt email targeting users of a French e-toll company. While this email contains no mobile…

Mar 21

Phishing attempt on French e-tolls

Mar 21

@cryptax

What makes a good CTF challenge?

A Capture The Flag (CTF) challenge is a specific task or problem designed to test participants’ skills in various areas of cyber-security…

Mar 18

Mar 18

@cryptax

Android/SpyNote bypasses Restricted Settings + breaks many RE tools

Today, I reversed an Android spyware with multiple tricks. The malware has been discovered by @malwrhunterteam 2 days ago.

Feb 19

Android/SpyNote bypasses Restricted Settings + breaks many RE tools

Feb 19

@cryptax

A simple infostealer for beginners

Most Android malware are packed and obfuscated nowadays. From time to time, it’s nice to reverse a simple one 😆. This one was found at the…

Feb 9

A simple infostealer for beginners

Feb 9

@cryptax

@cryptax

Mobile and IoT malware researcher. The postings on this account are solely my own opinion and do not represent my employer.

Following

Help
Status
About
Careers
Press
Blog
Privacy
Terms
Text to speech
Teams