/path/to/pwn

2025-02-11 CVE-2024-44336 — AnkiDroid Open Source Team · AnkiDroid
mobile android intent intent-redirection arbitrary-file-read
2024-02-29 CVE-2024-33469 — TeamAmaze · Amaze File Manager
mobile android intent command-injection rce
2023-08-24 CVE-2023-4876 — hamza417 · Inure App Manager
mobile android intent file-provider arbitrary-file-read
2023-08-13 CVE-2023-4434 — hamza417 · Inure App Manager
mobile android intent arbitrary-file-read
2023-08-13 CVE-2023-4435 — hamza417 · Inure App Manager
mobile android intent bash arbitrary-file-read rce
2023-08-13 CVE-2023-5948 — TeamAmaze · Amaze File Utilities
mobile android intent content-provider setresult arbitrary-file-read

2026-06-29 Hello World
meta
2025-11-10 MobileHackingLab — Runtime Toad Writeup
mobile android unity rce ctf native
2025-01-01 MobileHackingLab — Document Viewer RCE
mobile android path-traversal rce native ctf
2024-05-24 Nahamcon CTF 2024 — Mobile Writeups
mobile ctf android frida flutter godot re
2023-10-16 TCP1P CTF 2023 — Mobile Writeups
mobile ctf android intent webview content-provider
2022-04-06 InsecureShop — Android App Exploitation, pt. 1
mobile android ctf webview hardcoded-credentials ssl
2022-04-06 InsecureShop — Android App Exploitation, pt. 2
mobile android ctf webview intent content-provider broadcast-receiver
2022-04-06 InsecureShop — Android App Exploitation, pt. 3
mobile android ctf rce content-provider file-provider

view all writeups →