Security person that also develops things. I enjoy building and breaking things, especially games.
United Kingdom
Joined October 2011
- Tweets519
- Following147
- Followers198
- Likes1.5K
Nikola Cucakovic retweeted
We are once again running our updated & comprehensive FOUR DAY mobile security training in Vegas this year 💥📲. Come master mobile app reverse engineering using r2frida - combining static and dynamic analysis. @_ringzer0 3rd-6th Aug 2024. Early bird pricing is available now! ringzer0.training/doubledown…
I wrote a CLI tool to pull data from @aurorawatchuk and and send it to @home_assistant over MQTT.
If you also want to build custom automation using electromagnetic data in the UK check out github.com/arbitraryrw/auror….
#aurora
Nikola Cucakovic retweeted
The Android team has open sourced our internal Rust Training! It's a four day course covering the full spectrum of Rust, from basic syntax to advanced topics like generics and error handling. It also includes Android-specific content on the last day.
google.github.io/comprehensi…
Nikola Cucakovic retweeted
🔥 New Post: Announcing InAppBrowser - see what JavaScript commands get injected through an in-app browser
👀 TikTok, when opening any website in their app, injects tracking code that can monitor all keystrokes, including passwords, and all taps.
krausefx.com/blog/announcing…
If you haven't checked out fuzzingbook.org by
@FuzzingBook, you should. I remember it being good but now it's incredible. Highly recommend if you're into fuzzing 10/10
Nikola Cucakovic retweeted
Todays the daaaaay! And look there I am! Go download #FallGuys on everything you own ✨
I wrote an Open Source tool to generate JSON permutations in #Python. Check it out if you want an alternative to manually modifying JSON objects for unit tests / fuzzing / security testing 🚀
Blog post: nikola.dev/posts/2022-05-29/…
Source: github.com/arbitraryrw/templ…
#programming #code
Nikola Cucakovic retweeted
🍎👾 Just published my annual "Mac Malware of the Year" report, for 2021: objective-see.com/blog/blog_…
An in-depth technical analysis of the year's new Mac malware, covering each:
💉 Infection vector
💾 Persistence mechanism
🛰 Payload and capabilities
+ samples for download! 🦠
I wrote an open source discord bot that plays youtube clips randomly in voice channels / when people unmute. The bot was made as a joke to play the "2 hours later" clip after people unmute. I checked it today and it has over 80,000 pulls, it's completely ridiculous and I love it
Code for reference github.com/arbitraryrw/broke…
Nikola Cucakovic retweeted
radius is a new symbolic execution and taint analysis framework written in Rust. It is the fastest* symbolic execution tool for binaries** and aims*** to be a complete and useful utility**** for reverse engineering and fuzzing. Try it out! github.com/aemmitt-ns/radius
Nikola Cucakovic retweeted
Exclusive content for my followers only! Top secret algorithm for finding 0-days.
Nikola Cucakovic retweeted
Gave a 30min intro to mobile app SBOM today at @devseccon. Just scratching the surface really, but it’s something we should all be thinking about: youtu.be/Q4d_N5VydJA. You can get by with some rudimentary scripts but static and dynamic analysis give some really great data.
Looking forward to this. Grant is exceptional at what he does, and he is a great presenter. Would recommend
I’ll be speaking about mobile app decomposition - dependencies, software bill of materials, and supply chain at @devseccon on June 24th at 14:15 GMT+1. Come check it out!
10/10 read @signalapp, would recommend
Our latest blog post explores vulnerabilities and possible Apple copyright violations in Cellebrite's software:
"Exploiting vulnerabilities in Cellebrite UFED and Physical Analyzer from an app's perspective"
signal.org/blog/cellebrite-v…
Nikola Cucakovic retweeted
Cheats in mobile games are easily accessible to anyone. Have a look how easy it is to overwrite the number of diamonds directly in memory in Top Mobile Games in 2021. & Make sure to protect your game! 💎📱 #MobileSecurity #ios #iosdev
It doesn't take years of #ReverseEngineering experience to cheat in #MobileGames. We use @fridadotre, #lldb, and even #xcode debugger to pamper our #ios Tamagotchi. We’ll show how & give a few tips for the game developers inside: hubs.la/H0JpvH20
#gamedev #appdev #appsec
Great article by a great researcher @janseredynski
With some reverse-engineering and @fridadotre magic, we play mobile games in ways developers never intended. Check out our teleporting in Bomberman + our tips on how to prevent it: hubs.la/H0FQ-W30
#appdev #gamedev #appsec #iosdev #mobilesecurity
