The Blog
Writeups, technique breakdowns, and deep dives into finding real vulnerabilities in Android apps.
Get new writeups in your inbox
Android hacking techniques, no spam.
Android Hacking
Recreating AI Companion App Vulnerabilities in Android
Recreating Android AI companion app vulnerabilities inspired by Oversecured, including path traversal, session token leaks, WebView injection, and exposed credentials.
October 27, 2026
Race Condition
Bypassing a Passcode Screen With Nothing but Timing
Fuzzing the deep link parameters went nowhere. The bypass turned out to have nothing to do with parameters at all - it was a timing gap in how the passcode activity got loaded.
October 20, 2026
CVE
CVE-2026-0073: The Android Bug Google Closed as Infeasible, Then Patched as Critical
A logic bug in Android's wireless ADB certificate check let attackers on the same network get a shell with zero clicks. CVE-2026-0073, explained and demoed.
August 2, 2026
Flutter
Intercepting Flutter App Traffic When Burp Shows You Nothing
Flutter apps ignore the OS proxy and ship their own TLS stack, so Burp sits there empty. Here's how to actually get visibility with Frida.
March 2, 2026
IDOR
Finding an IDOR That the Web Testers Missed
The web app for this target had already been tested twice. The Android client hit a different endpoint entirely - and it wasn't locked down.
January 18, 2026
IDOR
Forging API Signatures to Find 15 IDORs in an E-Wallet App
The app signed every request to stop parameter tampering. Once the signing function was reverse engineered, the "protection" became the attack surface.
April 30, 2020