Reversing a Modified AES in a Mobile App - Reconstructing Bangcle laes with Frida Stalker
Reversing a modified AES in a mobile app, reconstructing Bangcle's white-box laes cipher with Frida Stalker and IDA on ARM64 to recover the original algorithm.
Tag: Bangcle
A Hardened App's One Fatal Flaw: Token Verification Anchored to a Spoofable android_id
How a heavily hardened app's VIP token fell apart: its server-side verification was anchored to a spoofable android_id, so rotating the device ID mints unlimited fresh tokens.