Mobile Offensive Security 🔴 #redteam Android Reverse Engineering | malware analysis
- Tweets 1,424
- Following 49
- Followers 61,239
- Likes 186
Pinned Tweet
Public WiFi: Quick demo for 2 devices on the same network
1. SSLstrip + DNS change leads to user input interception for HTTPS with HSTS bypass
2. DNS spoofing redirects user to attacker controlled website
More in upcoming "NetHunter Hacker XIII: Overall guide to MITM framework"
Public WIFI is safe enough to use, without a VPN, for almost all users. And yes, even for online banking.
53
704
3,035
541,570
New toys just arrived!
Today I'm unboxing two new LoRa devices:
-ThinkNode M9
-ThinkNode M5
3
10
122
22,431
Turn a Rooted Android Phone into an NFC Authenticator and Automation Tool for Your PC
mobile-hacker.com/2026/09/21…
3
9
2,171
Chameleon Ultra: Guide to RFID Reading, Emulation and Testing
mobile-hacker.com/2026/09/07…
2
1
17
1,985
One tap. No contact permission. Your entire contact list could be exposed.
CVE-2026-28576 is a vulnerability that can bypass #Android’s normal contact-access protection by misusing SQL injection in Android system component
1
30
187
7,862
Android 17 devices with the July 1, 2026 security patch or newer are protected.
This PoC was replicated and documented by MobileHackingLab
Blog: mobilehackinglab.com/blog/cv…
PoC APK: github.com/mobilehackinglab/…
1
8
1,054
Is iPhone affected?
I have tested yesterday's published WhatsApp vulnerability against latest iOS and it is not affected
This WhatsApp security issue affects only Android devices where it allows to access photos during a WhatsApp video call on PIN locked smartphone
7
23
148
13,454
This is not fixed, so to prevent this, you can do one simple thing - you need to allow limited access to your photos and videos in permissions menu of WhatsApp app
1
2
6
1,540
Here is a quick summary of the issue with prevention tips
mobile-hacker.com/2026/09/02…
3
886
Your photos can be accessed without unlocking your Android when you receive a #WhatsApp video call
This was discovered by @VBarraquito and already reported to Meta and Google
9
61
331
26,004
This is not fixed, so to prevent this, you can do one simple thing - you need to allow limited access to your photos and videos in permissions menu of WhatsApp app
1
1
10
1,789
Here is a quick summary with prevention tips mobile-hacker.com/2026/09/02…
3
5
9,697
Mobile Hacker retweeted
How to Install Proxmark3 on the ClockworkPi uConsole to read and write some of RFID and NFC tokens
In a new video, I install Proxmark3 Easy on uConsole, configure and compile the firmware, test reading and dumping my Mifare card
2
11
65
3,810
How to Install Proxmark3 on the uConsole to clone RFID and NFC tokens
I turned my uConsole into a portable RFID research platform by connecting a Proxmark3 Easy
In my blog I cover the installation process, firmware setup, and test by reading and dumping MIFARE Classic keys 👇
5
104
735
45,257
Here is my blog with video on how to setup Proxmark3 on uConsole
mobile-hacker.com/2026/08/31…
1
18
1,603
How to Install Proxmark3 on the #uConsole to read, write and clone some of RFID and NFC tokens on the go
New blog + video tutorial 👇
3
39
276
10,862
In a new video, I install Proxmark3 Easy on uConsole, configure and compile the firmware, test reading and dumping my Mifare card keys
mobile-hacker.com/2026/08/31…
1
2
13
1,338