All posts

A list of all published blog posts.

2017

Inside Android's SafetyNet Attestation - BlackHatEU17 slides — Dec 8
Mobile OS version adoption — Aug 23
Library injection for debuggable Android apps — Jul 9
Using Frida on Android without root — Apr 12
Pinning - not as simple as it sounds — Mar 22

2016

Inside SafetyNet - part 3 — Nov 13
Migrating from Ghost to Hugo — Nov 7
Hiding root with suhide — Aug 30
Certificate Pinning for mobile apps - OWASP AppSecEU16 slides — Aug 9
Testing for CVE-2016-2402 and similar pinning issues — Mar 31
Inside SafetyNet - part 2 — Mar 20
Network Security Policy configuration for Android apps — Feb 15

2015

Using Android's tamper detection securely in your app — Oct 12
SafetyNet: Google's tamper detection for Android — Sep 17
Using ProGuard to remove logs — Jul 2
Android M and the war on cleartext traffic — Jun 17
Substrate - hooking C on Android — Jun 1
Same Origin Policy and the Android WebView — May 15