Android
Posts with this tag
Posts
-
flagchecker3: A Bytecode VM That Decrypts Itself Only If You Already Know the Flag
A write-up of the Android reversing challenge flagchecker3 from VSLCTF 2026, where the native checker runs a bytecode VM whose instruction stream is XOR-encrypted under a key that every comparison result feeds back into, so a wrong byte derails the decryption and turns the obfuscation into an oracle.
-
An Android App Security Assessment Checklist
A static-to-dynamic walkthrough for assessing an Android app you own, from APK structure and exported components to storage, network security config and certificate pinning, mapped to OWASP MASVS.
