Allsafe - Android Writeup

[ayboraa]

Hey! I recently shared a writeup of Allsafe app. It shows solutions to the most of the vulnerabilities in the app.
I wrote a PoC application to get a reverse shell with arbitrary code execution to demonstrate the risks. You will also learn how to efficiently use GHidra and Frida to hook and intercept native library methods.

https://ayboraa.github.io/Mobile%20Security/writeups/allsafe/

Hope it helps!

[t0thkr1s]

Hi!

I just checked out your write-up and I have to say well done. It is clear, concise and to the point. I am sure that it will greatly help others. I really hope you enjoyed doing the exercises and liked the app overall. Now, I am thinking adding a write-ups sections to the readme and referencing your work. If you have the time, maybe you can create a pull request about it. I am also slowly working on the iOS version, once it is done I would love to have a write-up like yours on it as well.

Thank you again for writing and keep up the good work!

[ayboraa]

Thanks for the kind reply! I really enjoyed solving the exercises. I’ll definitely add a section to the README, and I’m also thinking of adding more challenges, like bypassing detection mechanisms implemented as native libraries. If I get the opportunity to test iOS, I’ll definitely check it out! Thanks again for supporting the mobile security community.

[t0thkr1s]

Yes, adding more challenges would be great! If you have the time and ideas, we can definitely improve the application. By the way, I already merged your pull request, so thank you again!