Jan Seredyński (@janseredynski) profile picture

Mobile Security

Warszawa, Polska
Joined August 2014
Photo by Jan Seredyński (@janseredynski)Photo by Jan Seredyński (@janseredynski)Photo by Jan Seredyński (@janseredynski)Photo by Jan Seredyński (@janseredynski)
SQL Injection is still present in 2023 on mobile platforms 📱. If you think iOS is more secure than Android because it’s difficult to misconfigure, this article will change your mind! Happy to share my very first CVE-2023-41387. #MobileSecurity #flutter seredynski.com/articles/expl…
4
20
1,487
Jan Seredyński retweeted
No permissions. No root. Just pixels. Pixnapping-style attacks (CVE-2025-48561) can leak what’s displayed by other Android apps. We recreated the attack + tested mitigations devs can apply now —> hubs.la/Q03PtKsD0 #AndroidDevelopers #SecurityResearch #AppSecurity
4
2
393
Jeśli interesujesz się malware na Androida, to nagranie mojej prezentacji z ostatniego The Hack Summit jest już dostępne na YouTube. Zachęcam do obejrzenia! 👾📱 #android #malware
🔻Malware w mobilnych aplikacjach bankowych - czyli jak stracić pieniądze w mgnieniu oka 🔻Jan Seredyński @janseredynski youtu.be/MjKPLoJF920?si=BJ5A…
8
352
Two years ago, I accidentally dropped my iPhone XS into the sea. It didn’t turn on anymore. Today, I plugged it into the charger. To my surprise, it works again. 🍎 <3
8
394
An excellent course from two best mobile security experts 🔥🔥 Don't miss out.
4
310
A random tip: you can install a dumped iOS app on your Mac with Apple Silicon. Just resign the IPA with your developer certificate and make sure your Mac is listed on the provisioning profile.
5
Apple vs Polish government saying they don't use #PegasusSpyware hacking tool on lawyers and the opposition. 📱
Właśnie otrzymałam alert @AppleSupport o możliwym cyberataku na mój telefon ze strony służb państwowych. Ze wskazaniem, że mogę być celem ataku ze względu na to co robię lub kim jestem. Ostrzeżenie potraktuję poważnie bo poprzedziły je inne incydenty @ZiobroPL czy to przypadek?
1
2
For those who want to know the price for similar exploits
2
Excited to talk at @CONFidenceConf about mobile app security. Get ready for real-world case studies on hacked apps and games.
Please welcome our next speaker - @janseredynski , who is a #mobile #security researcher and #pentester, who also has over five years of experience in mobile app development. 👏 He will present the lecture: “How Mobile Game Cheats unlock App Security Lessons”.🤖
9
Jan Seredyński retweeted
Guardsquare is looking for a Security Researcher to join the team! Have a look at the job description here: hubs.la/H0TKv6J0 #hiring #jobs
2
2
Well described Mach ports with a practical example. Recommend to all iOS folks in #MobileSecurity Waiting for the next article!
Starting new series today covering my attempt to get to know XNU IPC better. First up, Mach messages 🙌 dmcyk.xyz/post/xnu_ipc_i_mac…
1
4
Cheats in mobile games are easily accessible to anyone. Have a look how easy it is to overwrite the number of diamonds directly in memory in Top Mobile Games in 2021. & Make sure to protect your game! 💎📱 #MobileSecurity #ios #iosdev
2
6
Tomorrow I will give a webinar about cheating in mobile games on #ios and #android. Come and learn how hackers walk through walls in games and bypass payments in apps? I'll also show how to protect your app against these attacks. #MobileSecurity
We created cheats for mobile games using reverse engineering techniques, and built a mobile app security model from it! Join us on March 4th to find out more @DZoneInc: hubs.la/H0HtL050 #gamedev #devsec #appsec #mobilegaming #devsecops
1
10
Don't forget to update your offsets for #cicuta_virosa. 0x390 on iPhone 7/iOS 14.1 #jailbreak
1
6
Jan Seredyński retweeted
Joining the cicuta_virosa by @ModernPwner hype with a little write up on finding offsets for iPhone X running iOS 14.0.1 🙇‍♂️ dmcyk.xyz/post/finding-offse…
1
1
1
Finally after 64 days the book arrived. Can't wait to start my read. #MOXiI
6
No need to disable SIP 1. Resign the app 2. Install IPA by double-clicking 3. lldb -n AppName 4. frida AppName // hangs until the next step 5. quit lldb
You can use frida or lldb to hook or debug iOS apps on MacBook with M1 chip. hits: disable SIP and resign apps.
2
3
9
Jan Seredyński retweeted
Kolega @janseredynski macha do zdjęcia, Dolina Śmierci, USA, 12/2015
1
1
12