Pablo Ajo

Reading Android Tombstones: Native Crash Forensics

What is a Tombstone?

Frida Gadget: Executing Frida Without Root

The Problem with frida-server

Hidden Calls: ARM64 Supervisor Calls and How to Hook Them with Frida

You’re reverse engineering an Android app. You expect to find a call to read or openat somewhere in the native code — you hook it with…

Inside the Android Keystore

How Android Biometric Authentication Works and Where It Fails

The Two Ways to Implement It

Faking a Mobile Client from Python with curl_cffi

The Problem

Patching an Android App: Decompile, Modify, Rebuild

The Setup

Controlling an Android Device Without Root or Accessibility Services

The Permission Wall

How to stalk your crush without getting noticed (Reversing Instagram’s Web API)

Visualizing Instagram stories anonymously using Instagram Web API

Intercepting and manipulating HTTP traffic with mitmproxy addons

Mitmproxy addons

Freezing Time: How to Install Older APK Versions Using Aurora Store

What is Aurora Store?