Cyber Security Blog

Real-world writeups on breaking Web, Mobile and Infrastructure

ISO 8583 Under Fire: Finding Vulnerabilities in a Payment Socket
A hands-on walkthrough of security testing an ISO 8583 payment socket — from reversing the app and enabling hidden debug mode, to finding four critical vulnerabilities in the processor layer
2456 words
12 minutes
Cover Image of the Post
Don’t Stop at Login Pages — Fuzz Deeper: From BAC to Stored XSS
Don’t Stop at Login Pages — Fuzz Deeper: From BAC to Stored XSS
370 words
2 minutes
Cover Image of the Post
Play Integrity API: How It Works & How to Bypass It
What's Play Interity API and how to bypass it
1272 words
6 minutes
Cover Image of the Post
Flutter SSL Bypass: How to Intercept HTTPS Traffic When all other Frida Scripts Fail
my journey in intercepting HTTPS traffic from a APK based on Flutter
709 words
4 minutes
Cover Image of the Post