Security research, tutorials, and technical deep-dives from the 8kSec Research Team.https://www.8ksec.io/en-ushttps://www.8ksec.io/ai-assisted-fuzzing-harness-local-llm/https://www.8ksec.io/ai-assisted-fuzzing-harness-local-llm/A hands-on guide to using a local open-source LLM to write fuzzing harnesses, then finding a real memory-corruption bug with AddressSanitizer, complete with runnable code and a downloadable lab.Mon, 06 Jul 2026 10:00:00 GMTAI Security Serieshttps://www.8ksec.io/android-selinux-internals-part-iv/https://www.8ksec.io/android-selinux-internals-part-iv/Deep dive into Android SELinux policy analysis using sesearch, Treble policy split, kernel mitigations (kCFI, PAC, MTE, SCS), and Android 16 SELinux changes including new domains and genfs versioning.Wed, 24 Jun 2026 10:00:00 GMTAndroidhttps://www.8ksec.io/android-selinux-internals-part-iii/https://www.8ksec.io/android-selinux-internals-part-iii/Deep dive into kernel-level SELinux bypass techniques, cross-cache attacks, GPU DMA bypasses, and analysis of real-world exploit chains including CVE-2019-2215, Dirty Pipe, and CVE-2024-53104.Wed, 03 Jun 2026 10:00:00 GMTAndroidhttps://www.8ksec.io/android-selinux-internals-part-ii/https://www.8ksec.io/android-selinux-internals-part-ii/Deep dive into Android SELinux domains, AVC denial parsing, and policy modification using Magisk, KernelSU, and APatch. Learn how to overcome SELinux for exploit testing.Mon, 11 May 2026 10:00:00 GMTAndroidhttps://www.8ksec.io/darksword-kernel-escalation-cve-2025-43510-43520/https://www.8ksec.io/darksword-kernel-escalation-cve-2025-43510-43520/A research-grade walkthrough of the kernel half of the DarkSword iOS chain — from a copy-on-write mismap in vm_map, through a VFS TOCTOU in mediaplaybackd, to deterministic kernel R/W and post-PPL data-only escalation under SPTM.Sun, 03 May 2026 10:00:00 GMTiOShttps://www.8ksec.io/how-browser-exploits-work-darksword-ios-cve-2025-43529/https://www.8ksec.io/how-browser-exploits-work-darksword-ios-cve-2025-43529/A beginner-friendly but technical walkthrough of the DarkSword iOS browser exploit chain — from the Safari JIT bug (CVE-2025-43529) to the WebContent sandbox escape via WebGL.Sun, 19 Apr 2026 10:00:00 GMTiOShttps://www.8ksec.io/mobile-malware-analysis-part-8-devixor/https://www.8ksec.io/mobile-malware-analysis-part-8-devixor/Complete reverse engineering analysis of deVixor v2.3.0, a sophisticated Android banking trojan with ransomware capabilities targeting Iranian financial institutions. Covers banking credential theft, keylogger, SMS interception, RAT commands, and anti-analysis techniques.Wed, 25 Feb 2026 10:00:00 GMTMobile Malwarehttps://www.8ksec.io/mie-deep-dive-enabling-apps/https://www.8ksec.io/mie-deep-dive-enabling-apps/Learn how to enable Memory Integrity Enforcement in iOS apps, check MIE entitlements, analyze crash logs, and understand MIE's impact on memory safety.Tue, 10 Feb 2026 10:00:00 GMTiOShttps://www.8ksec.io/mie-deep-dive-kernel/https://www.8ksec.io/mie-deep-dive-kernel/Deep dive into Apple's Memory Integrity Enforcement (MIE) feature. Analyze how MIE prevents memory corruption at the kernel level using Binary Ninja.Tue, 27 Jan 2026 12:35:04 GMTiOShttps://www.8ksec.io/2025-mobile-security-course-updates/https://www.8ksec.io/2025-mobile-security-course-updates/Explore all 2025 updates to 8kSec Academy mobile security courses, including new modules on CVE analysis, kernel exploitation, and iOS/Android internals.Thu, 15 Jan 2026 10:43:10 GMTUncategorizedhttps://www.8ksec.io/practical-ai-security-on-demand-course-launch/https://www.8ksec.io/practical-ai-security-on-demand-course-launch/New on-demand course covering practical AI security with hands-on labs for LLM attacks, MCP server exploitation, AI agent security, and defensive strategies.Mon, 01 Dec 2025 09:00:09 GMTUncategorizedhttps://www.8ksec.io/patch-diffing-ios-kernel/https://www.8ksec.io/patch-diffing-ios-kernel/Analyze CVE-2024-23265, an iOS kernel memory corruption vulnerability. Learn IPSW diffing techniques to identify how Apple patched the race condition.Tue, 07 Oct 2025 16:10:22 GMTiOShttps://www.8ksec.io/free-mobile-security-challenges/https://www.8ksec.io/free-mobile-security-challenges/Practice mobile security skills with free hands-on challenges for Android, iOS, and ARM exploitation. Earn certificates by finding real vulnerabilities.Wed, 25 Jun 2025 09:31:41 GMTUncategorizedhttps://www.8ksec.io/rooting-an-android-emulator-for-mobile-security-testing/https://www.8ksec.io/rooting-an-android-emulator-for-mobile-security-testing/Step-by-step guide to rooting an Android Virtual Device (AVD) using rootAVD for security testing. Enable root access for Frida, dynamic analysis, and more.Thu, 17 Apr 2025 23:29:00 GMTAndroidhttps://www.8ksec.io/compiling-dopamine-jailbreak/https://www.8ksec.io/compiling-dopamine-jailbreak/Step-by-step guide to compiling the Dopamine jailbreak from source for iOS 15/16. Learn exploit internals, set breakpoints, and trace execution flow.Fri, 04 Apr 2025 01:58:29 GMTiOShttps://www.8ksec.io/a-blueprint-of-android-activity-lifecycle/https://www.8ksec.io/a-blueprint-of-android-activity-lifecycle/Deep dive into the Android Activity lifecycle through AOSP internals and Android 15 source code. Understand each state transition beyond basic callbacks.Fri, 14 Mar 2025 10:51:23 GMTAndroidhttps://www.8ksec.io/why-you-should-remove-ssl-pinning-from-your-mobile-apps-in-2025/https://www.8ksec.io/why-you-should-remove-ssl-pinning-from-your-mobile-apps-in-2025/Learn why SSL pinning creates more risks than benefits in 2025. Discover how certificate changes cause outages and why industry leaders now advise against it.Mon, 10 Mar 2025 04:57:14 GMTAndroidiOShttps://www.8ksec.io/cve-2023-26083-kernel-pointer-leakage-in-mali-gpus-timeline-stream-message-buffers/https://www.8ksec.io/cve-2023-26083-kernel-pointer-leakage-in-mali-gpus-timeline-stream-message-buffers/Deep dive into CVE-2023-26083, a kernel pointer leak in Mali GPU drivers affecting ARM64 Android devices. Covers exploitation and detection.Wed, 05 Feb 2025 03:52:02 GMTAndroidhttps://www.8ksec.io/reading-ios-sandbox-profiles/https://www.8ksec.io/reading-ios-sandbox-profiles/Sandbox profiles define restrictions for iOS system processes and apps. Learn how to extract, decompile, and analyze them to understand security implications.Thu, 23 Jan 2025 02:45:49 GMTiOShttps://www.8ksec.io/analyzing-kernel-panic-ios/https://www.8ksec.io/analyzing-kernel-panic-ios/A kernel panic forces an iOS device to reboot. Learn how to extract and analyze kernel panic logs to diagnose issues and uncover security vulnerabilities.Mon, 13 Jan 2025 12:27:03 GMTiOShttps://www.8ksec.io/on-demand-mobile-security/https://www.8ksec.io/on-demand-mobile-security/Introducing 8kSec Academy with four on-demand mobile security courses covering offensive reversing, Android/iOS internals, and mobile malware analysis.Wed, 13 Nov 2024 07:34:23 GMTUncategorizedhttps://www.8ksec.io/advanced-frida-usage-part-10-instruction-tracing-using-frida-stalker/https://www.8ksec.io/advanced-frida-usage-part-10-instruction-tracing-using-frida-stalker/Use Frida's Stalker API for real-time instruction tracing in Android apps. Part 10 covers tracing native code execution, filtering calls, and analysis.Tue, 17 Sep 2024 11:00:40 GMTAndroidFridahttps://www.8ksec.io/hacking-android-games/https://www.8ksec.io/hacking-android-games/Learn techniques for hacking Android games and understand the differences between app hacking and game hacking within the Android ecosystem.Thu, 15 Aug 2024 10:34:31 GMTAndroidhttps://www.8ksec.io/securing-flutter-applications/https://www.8ksec.io/securing-flutter-applications/Secure Flutter apps using the OWASP Mobile Top 10 2024 list. Covers credential handling, communication security, data storage, and binary protection.Fri, 05 Jul 2024 17:45:28 GMTAndroidiOShttps://www.8ksec.io/dissecting-windows-malware-series-unpacking-malware-from-theory-to-implementation-part-7/https://www.8ksec.io/dissecting-windows-malware-series-unpacking-malware-from-theory-to-implementation-part-7/Learn malware unpacking from theory to practice in Part 7. Understand packers, how packed executables work, and techniques to unpack malware samples.Thu, 06 Jun 2024 10:25:30 GMTWindowshttps://www.8ksec.io/dissecting-windows-malware-series-explaining-rootkits-practical-examples-investigation-methods-part-6/https://www.8ksec.io/dissecting-windows-malware-series-explaining-rootkits-practical-examples-investigation-methods-part-6/Explore rootkits and kernel internals in Part 6 of the Windows malware series. Learn practical rootkit investigation methods with examples.Tue, 21 May 2024 11:54:09 GMTWindowshttps://www.8ksec.io/mobile-malware-analysis-part-7-blackrock/https://www.8ksec.io/mobile-malware-analysis-part-7-blackrock/Analyze the Blackrock Android malware in Part 7 of the mobile malware series. Learn how it abuses accessibility services and overlays to steal data.Thu, 16 May 2024 23:35:53 GMTMobile Malwarehttps://www.8ksec.io/dissecting-windows-malware-series-creating-malware-focused-network-signature-part-5/https://www.8ksec.io/dissecting-windows-malware-series-creating-malware-focused-network-signature-part-5/Learn about OPSEC for safely investigating malware samples. Part 5 covers how malware disguises network traffic and creating detection signatures.Tue, 07 May 2024 09:41:07 GMTWindowshttps://www.8ksec.io/dissecting-windows-malware-series-risc-vs-cisc-architectures-part-4/https://www.8ksec.io/dissecting-windows-malware-series-risc-vs-cisc-architectures-part-4/Understand RISC vs CISC CPU architectures in Part 4 of the Windows malware series. Learn why architecture differences matter for malware analysis.Thu, 02 May 2024 09:20:46 GMTWindowshttps://www.8ksec.io/advanced-frida-usage-part-9-memory-scanning-in-android/https://www.8ksec.io/advanced-frida-usage-part-9-memory-scanning-in-android/Learn about Frida's Memory.scan() API for scanning and patching bytes in Android process memory. Covers pattern matching and practical patching.Tue, 30 Apr 2024 06:27:27 GMTAndroidFridahttps://www.8ksec.io/dissecting-windows-malware-series-understanding-cryptography-and-data-encoding-part-3/https://www.8ksec.io/dissecting-windows-malware-series-understanding-cryptography-and-data-encoding-part-3/Learn how malware uses encryption like AES and encoding like Base64 to hide its functionality. Part 3 of the Windows malware series.Thu, 25 Apr 2024 10:30:42 GMTWindowshttps://www.8ksec.io/dissecting-windows-malware-series-process-injections-part-2/https://www.8ksec.io/dissecting-windows-malware-series-process-injections-part-2/Learn the differences between process injection and process hollowing in Part 2 of the Windows malware series. Covers key injection techniques.Tue, 23 Apr 2024 14:24:41 GMTWindowshttps://www.8ksec.io/frida-advanced-usage-part-8-frida-memory-operations-continued/https://www.8ksec.io/frida-advanced-usage-part-8-frida-memory-operations-continued/Continue exploring Frida memory operations in Part 8 of the series. Covers Memory.scan, Memory.copy, MemoryAccessMonitor, and practical code patching.Sun, 14 Apr 2024 10:09:47 GMTAndroidFridahttps://www.8ksec.io/advanced-frida-usage-part-7-frida-memory-operations/https://www.8ksec.io/advanced-frida-usage-part-7-frida-memory-operations/Use Frida for memory manipulation in native Android libraries. Part 7 covers the JavaScript API for reading, writing, and scanning process memory.Thu, 11 Apr 2024 04:45:36 GMTAndroidFridahttps://www.8ksec.io/dissecting-windows-malware-series-beginner-to-advanced-part-1/https://www.8ksec.io/dissecting-windows-malware-series-beginner-to-advanced-part-1/In Part-1 of Dissecting Windows Malware blog series, we’ll lay down the foundations of analysing and reverse engineering Windows malicious files.Tue, 09 Apr 2024 04:03:26 GMTWindowshttps://www.8ksec.io/advanced-frida-usage-part-6-utilising-writers/https://www.8ksec.io/advanced-frida-usage-part-6-utilising-writers/Learn how to use Frida writers like X86Writer and Arm64Writer for runtime code patching with Memory.patchCode in Part 6 of our Advanced Frida series.Fri, 22 Dec 2023 04:22:39 GMTFridaiOShttps://www.8ksec.io/mobile-malware-analysis-part-6-xenomorph/https://www.8ksec.io/mobile-malware-analysis-part-6-xenomorph/Dissect the Xenomorph Android banking trojan in Part 6. Analyze obfuscated code, uncover dynamically loaded payloads, and identify phishing overlay pages.Thu, 14 Dec 2023 15:47:08 GMTMobile Malwarehttps://www.8ksec.io/arm64-reversing-and-exploitation-part-10-intro-to-arm-memory-tagging-extension-mte/https://www.8ksec.io/arm64-reversing-and-exploitation-part-10-intro-to-arm-memory-tagging-extension-mte/Explore ARM Memory Tagging Extension (MTE) in Part 10 of our ARM64 series. Learn how MTE detects buffer overflows, use-after-free, and other memory bugs.Mon, 11 Dec 2023 02:15:51 GMTARM64https://www.8ksec.io/mobile-malware-analysis-part-5-analyzing-an-infected-device/https://www.8ksec.io/mobile-malware-analysis-part-5-analyzing-an-infected-device/Simulate and detect iOS malware IOCs in Part 5. Use MVT with filesystem dumps, backups, and sysdiagnose to search for Pegasus-related indicators.Thu, 30 Nov 2023 06:30:22 GMTMobile Malwarehttps://www.8ksec.io/mobile-malware-analysis-part-4-intro-to-ios-malware-detection/https://www.8ksec.io/mobile-malware-analysis-part-4-intro-to-ios-malware-detection/Learn iOS malware detection fundamentals in Part 4. Explore forensic artifact collection methods including filesystem dumps, iTunes backups, and sysdiagnose.Mon, 27 Nov 2023 02:46:27 GMTMobile Malwarehttps://www.8ksec.io/arm64-reversing-and-exploitation-part-9-exploiting-an-off-by-one-overflow-vulnerability/https://www.8ksec.io/arm64-reversing-and-exploitation-part-9-exploiting-an-off-by-one-overflow-vulnerability/Learn how to exploit an off-by-one byte overflow vulnerability on ARM64 in Part 9 of our reversing and exploitation series with hands-on examples.Wed, 22 Nov 2023 01:00:27 GMTARM64https://www.8ksec.io/ipsw-walkthrough-part-2-the-swiss-army-knife-for-ios-macos-security-research/https://www.8ksec.io/ipsw-walkthrough-part-2-the-swiss-army-knife-for-ios-macos-security-research/Continue exploring the ipsw tool in Part 2. Learn kernelcache extraction, img4 analysis, USB device interaction, and advanced iOS research techniques.Tue, 14 Nov 2023 14:40:10 GMTiOShttps://www.8ksec.io/arm64-reversing-and-exploitation-part-8-exploiting-an-integer-overflow-vulnerability/https://www.8ksec.io/arm64-reversing-and-exploitation-part-8-exploiting-an-integer-overflow-vulnerability/Explore integer overflow vulnerabilities on ARM64 in Part 8. Learn how arithmetic bugs can lead to exploitable conditions in ARM64 binaries.Thu, 09 Nov 2023 11:39:30 GMTARM64https://www.8ksec.io/ipsw-walkthrough-part-1-the-swiss-army-knife-for-ios-macos-security-research/https://www.8ksec.io/ipsw-walkthrough-part-1-the-swiss-army-knife-for-ios-macos-security-research/Learn how to use the ipsw tool for iOS and macOS security research. Explore dyld_shared_cache, DeviceTree, kernelcache, and Img4 analysis capabilities.Mon, 06 Nov 2023 10:39:27 GMTiOShttps://www.8ksec.io/mobile-malware-analysis-part-3-pegasus/https://www.8ksec.io/mobile-malware-analysis-part-3-pegasus/In part 3 of mobile malware analysis, we will talk about Pegasus/ Chryasor variant. Uncover sneaky obfuscation techniques, malicious binaries and much more!Wed, 01 Nov 2023 10:13:07 GMTMobile Malwarehttps://www.8ksec.io/advanced-root-detection-bypass-techniques/https://www.8ksec.io/advanced-root-detection-bypass-techniques/Learn advanced root detection techniques on Android and practical methods to bypass them using Frida. Covers common detection libraries and evasion strategies.Wed, 20 Sep 2023 15:30:02 GMTAndroidFridahttps://www.8ksec.io/arm64-reversing-and-exploitation-part-7-bypassing-aslr-and-nx/https://www.8ksec.io/arm64-reversing-and-exploitation-part-7-bypassing-aslr-and-nx/Learn ARM64 Binary Exploitation and get around ASLR and NX constraints in our Part 7 of the ARM64 Reversing and Exploitation Series. Read more !Tue, 05 Sep 2023 16:26:00 GMTARM64https://www.8ksec.io/mobile-malware-analysis-part-2-masterfred/https://www.8ksec.io/mobile-malware-analysis-part-2-masterfred/Demystify the inner workings of MasterFred,a notorious malware exploiting Android Accessibility services to steal financial and social information. Read more!Tue, 29 Aug 2023 16:30:04 GMTMobile Malwarehttps://www.8ksec.io/arm64-reversing-and-exploitation-part-6-exploiting-an-uninitialized-stack-variable-vulnerability/https://www.8ksec.io/arm64-reversing-and-exploitation-part-6-exploiting-an-uninitialized-stack-variable-vulnerability/Part 6 of our ARM64 Reversing and Exploitation series examines uninitialised stack variables in ARM64 and steps for exploitation. Learn more!Wed, 23 Aug 2023 02:39:47 GMTARM64https://www.8ksec.io/mobile-malware-analysis-part-1-crypto-wallet-stealer/https://www.8ksec.io/mobile-malware-analysis-part-1-crypto-wallet-stealer/Analyze Android malware leveraging accessibility features to steal crypto wallets. Covers static and dynamic analysis of a wallet stealer app.Thu, 17 Aug 2023 14:08:18 GMTMobile Malwarehttps://www.8ksec.io/advanced-frida-usage-part-4-sniffing-location-data-from-locationd-in-ios/https://www.8ksec.io/advanced-frida-usage-part-4-sniffing-location-data-from-locationd-in-ios/Learn how to sniff and manipulate location data from the locationd daemon on iOS using Frida. Covers CLLocationManager internals and interception.Wed, 02 Aug 2023 14:58:28 GMTFridaiOShttps://www.8ksec.io/advanced-frida-usage-part-3-inspecting-ios-xpc-calls/https://www.8ksec.io/advanced-frida-usage-part-3-inspecting-ios-xpc-calls/Explore XPC communication between iOS processes. Learn to intercept and modify XPC messages using Frida for advanced security analysis.Wed, 19 Jul 2023 13:19:32 GMTFridaiOShttps://www.8ksec.io/arm64-reversing-and-exploitation-part-5-writing-shellcode-8ksec-blogs/https://www.8ksec.io/arm64-reversing-and-exploitation-part-5-writing-shellcode-8ksec-blogs/Learn how to create ARM64 shellcode in Part 5 of the series on ARM64 reversing and exploitation. Subscribe for the latest updates.Tue, 11 Jul 2023 14:18:02 GMTARM64https://www.8ksec.io/arm64-reversing-and-exploitation-part-4-using-mprotect-to-bypass-nx-protection-8ksec-blogs/https://www.8ksec.io/arm64-reversing-and-exploitation-part-4-using-mprotect-to-bypass-nx-protection-8ksec-blogs/In ARM64 Reversing and Exploitation Part 4, find out how to utilize mprotect() to get around NX on ARM64 and execute your shellcode. Read to find out more!Tue, 04 Jul 2023 19:12:52 GMTARM64https://www.8ksec.io/android-selinux-internals-part-i-8ksec-blogs/https://www.8ksec.io/android-selinux-internals-part-i-8ksec-blogs/Explore Android SELinux internals in Part 1. Learn how SELinux provides mandatory access control on Android devices and discover bypass techniques.Tue, 27 Jun 2023 18:50:13 GMTAndroidhttps://www.8ksec.io/ios-deep-link-attacks-part-2-exploitation-8ksec-blogs/https://www.8ksec.io/ios-deep-link-attacks-part-2-exploitation-8ksec-blogs/Explore iOS deep link vulnerabilities with technical exploitation demos in Part 2. Covers URL scheme hijacking and universal link attacks.Mon, 05 Jun 2023 13:57:37 GMTiOShttps://www.8ksec.io/advanced-frida-usage-part-2-analyzing-signal-and-telegram-messages-on-ios/https://www.8ksec.io/advanced-frida-usage-part-2-analyzing-signal-and-telegram-messages-on-ios/Dissect Signal and Telegram communication on iOS in Part 2 of the Advanced Frida series. Reveals message content, metadata, and encryption keys.Wed, 31 May 2023 21:01:40 GMTFridaiOShttps://www.8ksec.io/ios-deeplink-attacks-part-1-introduction-8ksec-blogs/https://www.8ksec.io/ios-deeplink-attacks-part-1-introduction-8ksec-blogs/Learn to identify deep link attack surfaces in iOS apps and uncover vulnerabilities. Covers URL schemes, universal links, and common misconfigurations.Wed, 17 May 2023 11:55:30 GMTiOShttps://www.8ksec.io/advanced-frida-usage-part-1-ios-encryption-libraries-8ksec-blogs/https://www.8ksec.io/advanced-frida-usage-part-1-ios-encryption-libraries-8ksec-blogs/Decrypt EncryptedStore, interact with encrypted databases, and perform AES encryption/decryption using Frida on iOS in Part 1 of the Advanced Frida series.Thu, 11 May 2023 12:02:45 GMTFridaiOShttps://www.8ksec.io/android-deeplink-and-webview-exploitation-8ksec-blogs/https://www.8ksec.io/android-deeplink-and-webview-exploitation-8ksec-blogs/In this Blog post, learn about Android deep link and WebView issues, explaining their targets, exploitation and security measures. Read nowWed, 26 Apr 2023 21:41:43 GMTAndroidhttps://www.8ksec.io/the-application-of-reinforcement-learning-in-cyber-security-8ksec-blogs/https://www.8ksec.io/the-application-of-reinforcement-learning-in-cyber-security-8ksec-blogs/In this article, we will discuss how Reinforcement Learning can shape the future of Cyber Security, and the steps we are taking at 8kSec to use this technology.Sat, 11 Feb 2023 09:41:16 GMTUncategorizedhttps://www.8ksec.io/arm64-reversing-and-exploitation-part-3-a-simple-rop-chain/https://www.8ksec.io/arm64-reversing-and-exploitation-part-3-a-simple-rop-chain/In ARM64 Reversing and Exploitation Part - 3, learn how to use ROP to get around security safeguards and execute code on ARM64 devices. Read more!Sun, 06 Nov 2022 12:06:49 GMTARM64https://www.8ksec.io/arm64-reversing-and-exploitation-part-2-use-after-free/https://www.8ksec.io/arm64-reversing-and-exploitation-part-2-use-after-free/Our blog series ARM64 Reversing and Exploitation Part 2 shows how to exploit a Use-after-free vulnerability. Learn more nowWed, 07 Sep 2022 09:21:54 GMTARM64https://www.8ksec.io/arm64-reversing-and-exploitation-part-1-arm-instruction-set-simple-heap-overflow/https://www.8ksec.io/arm64-reversing-and-exploitation-part-1-arm-instruction-set-simple-heap-overflow/ARM64 Reversing and Exploitation Part 1 blog series - Learn ARM64 instruction set and how to use it to reverse engineer ARM binaries.Sat, 07 May 2022 11:02:20 GMTARM64