Introduction Analyzing network traffic from Flutter Android apps can be tricky. In this post, we’ll walk through how to intercept and inspect traffic from a Flutter app running on an Android Virtua...

This is the third post in my Flare-On 11 series. If you haven’t already, I recommend checking out the previous writeup to get up to speed. As with the first post, you can find supplementary resour...

This is the second post in my Flare-On 11 series. If you haven’t already, I recommend checking out the previous writeup to get up to speed. As with the first post, you can find supplementary resou...

Over the past few weeks, I took part in the eleventh FLARE-ON Reverse Engineering Capture-the-Flag (CTF) competition. I managed to solve 6 out of the 10 challenges in this year’s Flare-On, picking...

Introduction Gopherjs is a compiler for the go language which compiles to pure javascript, it can be used to write go code which is executed on a webrowser, or where I found it, on a cordova app, w...

Introduction In this post I will show you how operator passwords can be recovered in cleartext from a salto proaccess services installation. This is posible due to the fact that the hashing algorit...

Introduction In this post I will explain you how does the yamaha motorbike immobiliser system work (only tested on the yamaha mt-07 2017). For the thieves out there, you can just purchase an immob...

Here there are some photos that I took a while ago, I think that they can be used as wallpapers but feel free to use them anywhere, the dragon one is from the internet but it’s my favourite backgro...