Staff Mobile Security Architect at ________ 📱🦄 Trail running ⛰️🏃
Joined August 2020
- Tweets199
- Following665
- Followers354
- Likes1.8K
I've been pretty silent on this platform, but been working on some blog posts: n0psn0ps.github.io/2025/07/1… #mobilesecurity #ctf #ios Thanks @8kSec
New blog post on reversing the QardioArm a Smart Blood Pulse Monitor: n0psn0ps.github.io/2025/02/1… #frida #mobilesecurity #bluetooth #cve
n0ps retweeted
Looking for some weekend reading?
I recently published a deep technical dive into *all* the new macOS malware of 2024 🍎🐛
The report covers:
💉 Infection vectors
💾 Persistence mechanisms
🔓 Capabilities & features
🛡️ Detection methods
Check it out! 👇
objective-see.org/blog/blog_…
n0ps retweeted
Lets check out the System Loco HGD4 Industrial Cellular connected GPS Tracker that you can get used for ~20€
Many useful parts inside that are "easy" hackable if you wanna take the route of making a custom firmware
nRF52840 + more
Video now online here:
youtube.com/watch?v=-UQDqFUL…
n0ps retweeted
Full custom firmware on the SR08 BLE Smart Ring goes Brrrrr...
s.click.aliexpress.com/e/_op…
What a pain to develop for the DA14585 SoC🥲 but works!
Demo Firmware allows OTA and a simple counter
Source is available here:
github.com/atc1441/ATC_SR08_…
Flashing on your own risk!
n0ps retweeted
1/11: Another day, another #backdoor! Our team started digging deep into the #macOS #malware sample (yet undetected on VirusTotal) shared by @bruce_k3tta, and surprisingly found out that it has the ability to execute arbitrary commands sent from C2 and capture screenshots.
n0ps retweeted
New RE Blog Post:
kandji.io/blog/kitty-stealer
Potential stealer in the making, we named Purrglar: Targets Chrome/Exodus, uses Security Framework APIs for Keychain access attempt (prompts the user), and leverages curl APIs. Was fun, a lot of arm64 instruction coverage in the blog :)
n0ps retweeted
Worried about a TikTok ban? Americans are now flocking to Xiaohongshu (REDnote), another Chinese app.
Spoiler: Yes, it tracks its users.
Time to dive in! ⬇️
n0ps retweeted
🚨🚨🚨Big Announcement! Introducing On-Demand Mobile Security Courses🚀
We’re thrilled to announce the start of pre-registration for our On-Demand Courses! At 8kSec Academy, you can advance your Mobile Security skills and earn certifications anytime, from anywhere🌍
Available Courses for Pre-Registration:
‣ Offensive Mobile Reversing and Exploitation (24Hrs of Content, 167 videos)
‣ Practical Mobile Application Exploitation (22Hrs of Content, 140 videos)
‣ Offensive iOS Internals (13Hrs of Content, 92 videos)
‣ Offensive Android Internals (10Hrs of Content, 69 videos)
Enroll early and unlock exclusive benefits:
🔹Special Early Bird Pricing – the best rates available, exclusively for early registrants
🔹Extended 15-Month Access – enjoy an extra 3 months to learn at your own pace, with continuous course updates
📖Explore full course details and pre-register now: academy.8ksec.io/
📚Learn more about the announcement here: 8ksec.io/on-demand-mobile-se…
🗓️Courses open for Pre-Registered Students on November 20, 2024.
Secure your spot now and get ready to elevate your skills in #MobileSecurity, #Jailbreak, and #MobileExploitation.
Follow @8ksec for more such updates.
ALT Mobile Security On-demand Courses Banner
n0ps retweeted
Let's reverse engineer a machine learning app on iOS! The Hotdog app can detect hotdogs 🌭, is there a chance to change it into a pizza 🍕 detector app?
youtu.be/e2kosWm2vag
ALT Hotdog or Not Hotdog - Machine Learning Reverse Engineering on iOS
n0ps retweeted
❄️ Announcing the Advent Of Radare2! ❄️
Stay tuned for the 1st of December!
radare.org/advent/
n0ps retweeted
Stoked that there will be an Apple-themed Capture the Flag (CTF) event at #OBTS v7.0 🤗🏴☠️
Interested in participating (or submitting a challenge)?Register here: docs.google.com/forms/d/e/1F…
And a big mahalo to @gutterchurl & @iamevltwin for putting together the CTF again! 🙏🏽
We ♥️ Capture the Flag (CTF)
Thanks to @gutterchurl & @iamevltwin (and @PaloAltoNtwks) this year featured the very first ever #OBTS CTF! ⛳️👩🏻💻👨🏻💻
Attendees & students teamed up and competed to crack iOS & macOS themed challenges, to win both prizes and bragging rights!
n0ps retweeted
After my previous post, I recieved a few comments about ptrace!
I was curious and decided to explore this new track.
In the post:
➡️ I used ptrace to prevent debugger attaching my program
➡️ I dived into xnu sources to reverse-engineer ptrace
⬇️⬇️⬇️⬇️
tonygo.tech/2024/anti-debugg…
ALT macOS using ptrace to prevent debugging
n0ps retweeted
🔥 The initial schedule for #r2con2024 is now public! The CFP is still open, for the “Online Sunday” in video format radare.org/con/2024 🎟️ Conference tickets and other details will be available soon. Follow us in the fediverse for the latest news! infosec.exchange/@radareorg
n0ps retweeted
📖🏨 Book your hotel for #r2con2024 ! 🐦🔥 Location is now public, stay tuned as we will soon setup the ticketing and announce the schedule! If you are still willing to speak: the cfp is still open! rada.re/con/2024
n0ps retweeted
Actually, 15+ new sandbox escape vulnerabilities discovered. All of them are simple logic issues.
You may find your own sandbox 0-days by yourself after listening to this talk!🔥🔥🔥
I wrote a new post on using #r2frida to bypass system calls in a custom mobile application. The application is for iOS and written in a mix of Swift and assembly.
n0psn0ps.github.io/2024/08/3…
#frida #mobilesecurity #iOS #radare2
n0ps retweeted
The people have spoken, and I shall deliver:
The missing guide to the security of filesystems and file APIs:
gergelykalman.com/the-missin…
(Twitter didn't appreciate a pdf being linked directly, so hopefully this makes it to whoever is interested.)
n0ps retweeted
🆕📲 Announcing the release of the @owasp MASWE (Weakness Enumeration) beta! This brand new OWASP MAS resource bridges the gap between MASVS high-level controls and MASTG low-level testing, using a similar approach to CWEs.
Blog post: mas.owasp.org/news/2024/07/3…
#MobileSecurity
