Jan Seredyński

SQL Injection is still present in 2023 on mobile platforms 📱. If you think iOS is more secure than Android because it’s difficult to misconfigure, this article will change your mind! Happy to share my very first CVE-2023-41387. #MobileSecurity #flutter seredynski.com/articles/explo…

No permissions. No root. Just pixels. Pixnapping-style attacks (CVE-2025-48561) can leak what’s displayed by other Android apps. We recreated the attack + tested mitigations devs can apply now —> hubs.la/Q03PtKsD0 #AndroidDevelopers #SecurityResearch #AppSecurity

Jeśli interesujesz się malware na Androida, to nagranie mojej prezentacji z ostatniego The Hack Summit jest już dostępne na YouTube. Zachęcam do obejrzenia! 👾📱 #android #malware

@saidmgani Hope it’s not your /etc/passwd ? 😂

My first 0666 tattoo 😂

@alfiecg_dev That's correct but then you can't use opainject to inject any dylib until you fix github.com/opa334/ChOma/i… Or you want to use a different way to inject tweaks?

@janseredynski You can’t change that CodeDirectory, the signature must remain intact

@alfiecg_dev The one with SHA-1

@janseredynski Which CodeDirectory are you talking about?

@alfiecg_dev Don't you set the CodeDirectory to com.icraze.gtatracker's TeamID?

@janseredynski We already update the CodeDirectory with the custom team ID

@alfiecg_dev Did you try it yourself? I think you need to update the CodeDirectory too to make it work.

@janseredynski Hmm, that should not happen…

@alfiecg_dev I used ct_bypass to resign a dylib and update its TeamID. Then I used opainject to inject the dylib into an appstore app but dlopen failed because of a different TeamID.

@janseredynski What do you mean?

@alfiecg_dev but the sandbox complains about the TeamID when e.g. using opainject

@janseredynski Yes

@OricElvis iOS 14.6 🤣 It gives many jailbreak opportunities🧌

@janseredynski Which ios version? :P

Two years ago, I accidentally dropped my iPhone XS into the sea. It didn’t turn on anymore. Today, I plugged it into the charger. To my surprise, it works again. 🍎 <3

An excellent course from two best mobile security experts 🔥🔥 Don't miss out.

@saidmgani I remember you laughing at me for this calendar ~3 years ago 😂

Time to time I open this calendar, that is kinda reminding about my mortality and how much is left in a very optimistic case 😅😅😅. I can't say that it keeps motivating me, but there is something about it 🤣🤣🤣

A random tip: you can install a dumped iOS app on your Mac with Apple Silicon. Just resign the IPA with your developer certificate and make sure your Mac is listed on the provisioning profile.

@akusio_RR Any hint how to get offsets for hardcode_off_allproc to support arm64?

@karolpiateknet The same checkmarks for both QA&developer in the acceptance criteria table is a really useful remark. Thanks!

swiftyfriday.com/How-to-save-mi… #development

@rybak_rrrr @tomasz @elonmusk To w sumie spora różnica bo można nawet zainstalować installer aplikacji. Dlatego nie wiem na ile trzeba czepiać się Google, skoro pozwala konkurencji na własne rozwiązania.

@tomasz @janseredynski @elonmusk Google też pobiera czy pobierało prowizję 30% i tak samo było krytykowane. Jedyna różnica to można zmienić sklep albo instalować z apk.

Elon @elonmusk krytykuje prowizje w App Store... zabawne bo chłop zbił miliardy na prowizjach PayPala ;) myapple.pl/posts/26105-el…

@tomasz @rybak_rrrr @elonmusk Nie wiem czy na pewno tak dużo dają. Jakby dać możliwość powstawania alternatywnych appstorów to powstałaby zdrowa konkurencja i na pewno użytkownik by bardziej skorzystał.

@rybak_rrrr @elonmusk Apple daje bardzo dużo za te 30%