Tags

android

Android - Insecure Stripe Token Handling leads to Arbitrary Card Injection

Android  · 10 min · Simon Bertrand

Android - Exploiting Hardcoded Cryptography in Biometric Storage

Android  · 7 min · Simon Bertrand

Mobile Hacking Lab - Cyclic Scanner

Android  · 6 min · Simon Bertrand

Mobile Hacking Lab - IoT Connect

Android  · 9 min · Simon Bertrand

Mobile Hacking Lab - Guess Me

Android  · 16 min · Simon Bertrand

Mobile Hacking Lab - Config Editor

Android  · 9 min · Simon Bertrand

Mobile Hacking Lab - Document Viewer

Android  · 23 min · Simon Bertrand

Mobile Hacking Lab - Post Board

Android  · 16 min · Simon Bertrand

Mobile Hacking Lab - Secure Notes

Android  · 9 min · Simon Bertrand

Mobile Hacking Lab - Strings

Android  · 11 min · Simon Bertrand

Mobile Hacking Lab - Food Store

Android  · 4 min · Simon Bertrand

api

Exploiting SSRF in FilePond’s API

Web  · 3 min · Simon Bertrand

biometric

Android - Exploiting Hardcoded Cryptography in Biometric Storage

Android  · 7 min · Simon Bertrand

broadcast

Mobile Hacking Lab - IoT Connect

Android  · 9 min · Simon Bertrand

crypto

CVE-2025-65841 - Acustica Audio - Account Takeover via Weak Encryption and Insecure Storage in Aquarius Desktop macOS

CVE-2025-65841macOS  · 6 min · Simon Bertrand

Android - Exploiting Hardcoded Cryptography in Biometric Storage

Android  · 7 min · Simon Bertrand

cve

CVE-2024-3251 - Time-Based Blind SQL Injection in CLMS v1.0

CVE-2024-3251Web  · 6 min · Simon Bertrand

Mobile Hacking Lab - Config Editor

Android  · 9 min · Simon Bertrand

deserialization

Exploiting JSON.NET Deserialization for Remote Code Execution

Web  · 6 min · Simon Bertrand

dylib

CVE-2025-55076 - Plugin Alliance - InstallationHelper XPC Service Local Privilege Escalation

CVE-2025-55076macOS  · 10 min · Simon Bertrand

CVE-2025-62686 - Plugin Alliance - InstallationHelper dylib Injection on macOS

CVE-2025-62686macOS  · 10 min · Simon Bertrand

dynamic code loading

Mobile Hacking Lab - Document Viewer

Android  · 23 min · Simon Bertrand

file

CVE-2025-65843 - Acustica Audio - Insecure File Handling via Symlink in Aquarius Desktop macOS

CVE-2025-65843macOS  · 6 min · Simon Bertrand

handling

CVE-2025-65843 - Acustica Audio - Insecure File Handling via Symlink in Aquarius Desktop macOS

CVE-2025-65843macOS  · 6 min · Simon Bertrand

injection

CVE-2025-55076 - Plugin Alliance - InstallationHelper XPC Service Local Privilege Escalation

CVE-2025-55076macOS  · 10 min · Simon Bertrand

CVE-2025-62686 - Plugin Alliance - InstallationHelper dylib Injection on macOS

CVE-2025-62686macOS  · 10 min · Simon Bertrand

Android - Insecure Stripe Token Handling leads to Arbitrary Card Injection

Android  · 10 min · Simon Bertrand

json.net

Exploiting JSON.NET Deserialization for Remote Code Execution

Web  · 6 min · Simon Bertrand

libraries

Mobile Hacking Lab - Config Editor

Android  · 9 min · Simon Bertrand

macos

CVE-2025-65843 - Acustica Audio - Insecure File Handling via Symlink in Aquarius Desktop macOS

CVE-2025-65843macOS  · 6 min · Simon Bertrand

CVE-2025-65841 - Acustica Audio - Account Takeover via Weak Encryption and Insecure Storage in Aquarius Desktop macOS

CVE-2025-65841macOS  · 6 min · Simon Bertrand

CVE-2025-65842 - Acustica Audio - HelperTool XPC Service Local Privilege Escalation in Aquarius Desktop on macOS

CVE-2025-65842macOS  · 12 min · Simon Bertrand

CVE-2025-55076 - Plugin Alliance - InstallationHelper XPC Service Local Privilege Escalation

CVE-2025-55076macOS  · 10 min · Simon Bertrand

CVE-2025-62686 - Plugin Alliance - InstallationHelper dylib Injection on macOS

CVE-2025-62686macOS  · 10 min · Simon Bertrand

mobile

Android - Insecure Stripe Token Handling leads to Arbitrary Card Injection

Android  · 10 min · Simon Bertrand

Android - Exploiting Hardcoded Cryptography in Biometric Storage

Android  · 7 min · Simon Bertrand

Mobile Hacking Lab - Cyclic Scanner

Android  · 6 min · Simon Bertrand

Mobile Hacking Lab - IoT Connect

Android  · 9 min · Simon Bertrand

Mobile Hacking Lab - Guess Me

Android  · 16 min · Simon Bertrand

Mobile Hacking Lab - Config Editor

Android  · 9 min · Simon Bertrand

Mobile Hacking Lab - Document Viewer

Android  · 23 min · Simon Bertrand

Mobile Hacking Lab - Post Board

Android  · 16 min · Simon Bertrand

Mobile Hacking Lab - Secure Notes

Android  · 9 min · Simon Bertrand

Mobile Hacking Lab - Strings

Android  · 11 min · Simon Bertrand

Mobile Hacking Lab - Food Store

Android  · 4 min · Simon Bertrand

path traversal

Mobile Hacking Lab - Document Viewer

Android  · 23 min · Simon Bertrand

php

CVE-2024-3251 - Time-Based Blind SQL Injection in CLMS v1.0

CVE-2024-3251Web  · 6 min · Simon Bertrand

privesc

CVE-2025-65842 - Acustica Audio - HelperTool XPC Service Local Privilege Escalation in Aquarius Desktop on macOS

CVE-2025-65842macOS  · 12 min · Simon Bertrand

CVE-2025-55076 - Plugin Alliance - InstallationHelper XPC Service Local Privilege Escalation

CVE-2025-55076macOS  · 10 min · Simon Bertrand

CVE-2025-62686 - Plugin Alliance - InstallationHelper dylib Injection on macOS

CVE-2025-62686macOS  · 10 min · Simon Bertrand

provider

Mobile Hacking Lab - Secure Notes

Android  · 9 min · Simon Bertrand

rce

Exploiting JSON.NET Deserialization for Remote Code Execution

Web  · 6 min · Simon Bertrand

Mobile Hacking Lab - Guess Me

Android  · 16 min · Simon Bertrand

Mobile Hacking Lab - Config Editor

Android  · 9 min · Simon Bertrand

Mobile Hacking Lab - Document Viewer

Android  · 23 min · Simon Bertrand

Mobile Hacking Lab - Post Board

Android  · 16 min · Simon Bertrand

service

CVE-2025-65842 - Acustica Audio - HelperTool XPC Service Local Privilege Escalation in Aquarius Desktop on macOS

CVE-2025-65842macOS  · 12 min · Simon Bertrand

Mobile Hacking Lab - Cyclic Scanner

Android  · 6 min · Simon Bertrand

sql

Mobile Hacking Lab - Food Store

Android  · 4 min · Simon Bertrand

sqli

CVE-2024-3251 - Time-Based Blind SQL Injection in CLMS v1.0

CVE-2024-3251Web  · 6 min · Simon Bertrand

ssrf

Exploiting SSRF in FilePond’s API

Web  · 3 min · Simon Bertrand

storage

CVE-2025-65841 - Acustica Audio - Account Takeover via Weak Encryption and Insecure Storage in Aquarius Desktop macOS

CVE-2025-65841macOS  · 6 min · Simon Bertrand

strings

Mobile Hacking Lab - Strings

Android  · 11 min · Simon Bertrand

takeover

CVE-2025-65841 - Acustica Audio - Account Takeover via Weak Encryption and Insecure Storage in Aquarius Desktop macOS

CVE-2025-65841macOS  · 6 min · Simon Bertrand

token

Android - Insecure Stripe Token Handling leads to Arbitrary Card Injection

Android  · 10 min · Simon Bertrand

web

CVE-2024-3251 - Time-Based Blind SQL Injection in CLMS v1.0

CVE-2024-3251Web  · 6 min · Simon Bertrand

Exploiting SSRF in FilePond’s API

Web  · 3 min · Simon Bertrand

webview

Mobile Hacking Lab - Post Board

Android  · 16 min · Simon Bertrand

xpc

CVE-2025-65842 - Acustica Audio - HelperTool XPC Service Local Privilege Escalation in Aquarius Desktop on macOS

CVE-2025-65842macOS  · 12 min · Simon Bertrand

xss

Mobile Hacking Lab - Post Board

Android  · 16 min · Simon Bertrand