Android Signature Verification: An Offense-Defense Walkthrough
An offense-defense walkthrough of Android signature verification: how it works, how attackers bypass it, and how to defend against tampering, and the mechanism explained clearly.
Tag: svc
Abyss: Intercepting SVC Syscalls on Android with BPF and Seccomp
Abyss: intercepting svc syscalls on Android with BPF and seccomp, a kernel-level approach to syscall hooking that leaves no userspace trace behind, and the code traced down to the core.
A General Approach to Bypassing Frida Detection
A general approach to bypassing Frida detection on Android, using svc hooks and Stalker to hide the framework from apps that actively hunt it, and the bypass logic broken down.
A Universal SVC Hook for Android Using seccomp + sigaction
A universal svc hook for Android using seccomp and sigaction, intercepting syscalls with BPF filters to trace or modify kernel calls globally, and the gotchas flagged along the way.
Android Device Fingerprinting: Collection and Countermeasures
How Android apps fingerprint your device and the countermeasures that defeat it, from ptrace and svc hooks to netlink and system-property spoofing, with every step broken down clearly.
A ptrace+seccomp Sandbox for Inline SVC Hooks
Building a ptrace and seccomp sandbox for inline svc hooks, using BPF filters to intercept syscalls tracelessly and read their register arguments, so you can reproduce it yourself.
Frida-Seccomp: Generic svc Tracing and Hooking on Android
A generic Frida-based method to trace and hook svc syscalls on Android using seccomp, including the threading deadlock pitfall and the fix that avoids it.
Getting the MAC Address via netlink and Inline svc — Bypassing Android Permissions
Getting a device's MAC address on Android without any permissions, using a netlink socket and inline svc calls to sidestep the OS's access controls, including the pitfalls and the fix.
A Universal iOS Anti-Anti-Debugging Tweak
Building a universal iOS tweak that lets you tick any app in settings and bypass its anti-debugging, integrating AppList and PreferenceLoader with Dobby and HookZz.
Bypassing Anti-Debugging in an iOS App
Bypassing an iOS app's layered anti-debugging: well-timed initialization checks, combined ptrace and svc guards, and periodic re-checks, defeated with targeted hooks.