Nikola Cucakovic (@ArbitraryRW) header
Nikola Cucakovic (@ArbitraryRW) profile picture

Security person that also develops things. I enjoy building and breaking things, especially games.

United Kingdom
Joined October 2011
Photo by Nikola Cucakovic (@ArbitraryRW)Photo by Nikola Cucakovic (@ArbitraryRW)Photo by Nikola Cucakovic (@ArbitraryRW)Photo by Nikola Cucakovic (@ArbitraryRW)Photo by Nikola Cucakovic (@ArbitraryRW)Photo by Nikola Cucakovic (@ArbitraryRW)Photo by Nikola Cucakovic (@ArbitraryRW)Photo by Nikola Cucakovic (@ArbitraryRW)Photo by Nikola Cucakovic (@ArbitraryRW)Photo by Nikola Cucakovic (@ArbitraryRW)
We are once again running our updated & comprehensive FOUR DAY mobile security training in Vegas this year 💥📲. Come master mobile app reverse engineering using r2frida - combining static and dynamic analysis. @_ringzer0 3rd-6th Aug 2024. Early bird pricing is available now! ringzer0.training/doubledown…
11
30
5,350
The Android team has open sourced our internal Rust Training! It's a four day course covering the full spectrum of Rust, from basic syntax to advanced topics like generics and error handling. It also includes Android-specific content on the last day. google.github.io/comprehensi…
49
694
51
2,932
418,909
Nikola Cucakovic retweeted
🔥 New Post: Announcing InAppBrowser - see what JavaScript commands get injected through an in-app browser 👀 TikTok, when opening any website in their app, injects tracking code that can monitor all keystrokes, including passwords, and all taps. krausefx.com/blog/announcing…
306
11,715
2,700
26,767
Nikola Cucakovic retweeted
Todays the daaaaay! And look there I am! Go download #FallGuys on everything you own ✨
1
2
38
Nikola Cucakovic retweeted
🍎👾 Just published my annual "Mac Malware of the Year" report, for 2021: objective-see.com/blog/blog_… An in-depth technical analysis of the year's new Mac malware, covering each: 💉 Infection vector 💾 Persistence mechanism 🛰 Payload and capabilities + samples for download! 🦠
4
235
13
597
radius is a new symbolic execution and taint analysis framework written in Rust. It is the fastest* symbolic execution tool for binaries** and aims*** to be a complete and useful utility**** for reverse engineering and fuzzing. Try it out! github.com/aemmitt-ns/radius
12
96
4
393
Nikola Cucakovic retweeted
I am glad that our deep learning-based disassembler paper is accepted by USENIX Security 2022. Hundreds of times faster than IDA when running on GPU, and robust to various obfuscations. Thus, it is an ideal tool for disassembling malware.
9
110
6
536
Exclusive content for my followers only! Top secret algorithm for finding 0-days.
7
94
2
630
Gave a 30min intro to mobile app SBOM today at @devseccon. Just scratching the surface really, but it’s something we should all be thinking about: youtu.be/Q4d_N5VydJA. You can get by with some rudimentary scripts but static and dynamic analysis give some really great data.
1
6
21
Nikola Cucakovic retweeted
6 hours of debugging can save you 5 minutes of reading documentation
116
2,870
340
14,681
Nikola Cucakovic retweeted
Cheats in mobile games are easily accessible to anyone. Have a look how easy it is to overwrite the number of diamonds directly in memory in Top Mobile Games in 2021. & Make sure to protect your game! 💎📱 #MobileSecurity #ios #iosdev
2
6
Nikola Cucakovic retweeted
1,516
87,280
3,848
529,821
pongo on m1
22
70
7
851
Nikola Cucakovic retweeted
I'll be starting a Twitch series called "Casual #AppSec" where I'll have a security expert on once a month to talk about different #security topics! My first guest will be @GeekMasher @ 8am PST - 19th January to show some fun usages with #CodeQL. Follow twitch.tv/karlbaskin
3
9
1
35
Nikola Cucakovic retweeted
No need to disable SIP 1. Resign the app 2. Install IPA by double-clicking 3. lldb -n AppName 4. frida AppName // hangs until the next step 5. quit lldb
You can use frida or lldb to hook or debug iOS apps on MacBook with M1 chip. hits: disable SIP and resign apps.
2
3
9
Nikola Cucakovic retweeted
checkra1n 0.11.0 is now available, adding support for iOS 14 on A9(X) devices and below. A10 devices and above NOT SUPPORTED YET, read our statement 👇 checkra.in/news/2020/09/iOS-…
503
1,004
214
3,476
Nikola Cucakovic retweeted
Just wrote a new blog post on "Introduction to CodeQL and Code Scanning". Hope all security researchers find this useful as an introduction to using #CodeQL and writing queries. #security #infosec #sast geekmasher.dev/posts/sast/co…
1
6
18
Details on how we caused an 23 min outage for~50% of @Cloudflare's network today. The root cause was a typo in a router configuration on our private backbone. We've applied safeguards to ensure a mistake like this will not cause problems in the future. blog.cloudflare.com/cloudfla…
81
820
259
2,424