Mobile Hacker

CVE-2025-10184 is permission bypass that affects multiple OnePlus devices running OxygenOS 12–15 (NOT FIXED) with PoC
This vulnerability allows any application installed on the device to read SMS/MMS without permission, user interaction, or consent.
www.rapid7.com/blog/post/cv...

Deobfuscating Android Apps with Androidmeda: A Smarter Way to Read Obfuscated Code I came across a new tool—Androidmeda—that caught my attention. It attempts to deobfuscate decompiled Android code using a large language model (LLMs). I decided to give it a try, and to my surprise, t...

Deobfuscating Android Apps with Androidmeda LLM: A Smarter Way to Read Obfuscated Code

✅As a bonus, example of deobfuscating Crocodilus Malware
www.mobile-hacker.com/2025/07/22/d...

How To Turn Old Android Smartphone into Travel Router With NAS Mobile Hacker It’s not perfect, but it works—a clever DIY project that blends portability, privacy, and practicality.

How To Turn Old Android Smartphone into Travel Router With NAS
www.mobile-hacker.com/2025/07/21/h...

Remote Input Injection vulnerability in Air Keyboard iOS App Still Unpatched On June 13, 2025 was disclosed vulnerability in the iOS version of the Air Keyboard app that exposes users to remote input injection over Wi-Fi. The flaw, documented in CXSecurity Report, allows an at...

Keyboard Input Injection vulnerability in Air Keyboard iOS App Still Unpatched
www.mobile-hacker.com/2025/07/17/r...

Offline, Encrypted, and Private Messaging using new Bitchat Bluetooth App Bitchat app is designed for private, secure communication without needing the internet. Instead, it uses a Bluetooth mesh network, meaning your messages travel directly between nearby phones — no serv...

The first version of Bitchat Android app was published yesterday

It is open-source, private, secure messaging app without needing the internet, that relies on Bluetooth mesh network
www.mobile-hacker.com/2025/07/10/o...

How to Install Gemini CLI on Android using Termux
www.mobile-hacker.com/2025/07/09/h...

Vibe Hacking with Nmap using Android
www.mobile-hacker.com/2025/07/07/v...

Introducing FileFix – A New Alternative to ClickFix Attacks A new browser attack vectors just dropped, and it’s called FileFix — an alternative to the well-known ClickFix attack. This method, discovered and shared by mrd0x, shows how attackers can to execute c...

FileFix – New Alternative to ClickFix Attack
www.mobile-hacker.com/2025/06/24/i...

How to Run ADB and Fastboot on a Non-Rooted Android Smartphone Using Termux Thanks to Termux and the clever termux-adb project, you can run ADB and Fastboot directly from your phone — no computer needed. This guide breaks down how to install it, how it works, and practical us...

How to use ADB & fastboot in Termux without root

You can use non-rooted Android to unlock bootloader, run ADB commands, remove bloatware, flash ROM, or even root another Android
www.mobile-hacker.com/2025/06/16/h...

Stryker App Goes Free: The Ultimate Mobile Pentesting Toolkit Stryker is a powerful mobile app that transforms your Android device into a pentesting workspace. Designed to help you test networks and devices for common vulnerabilities without requiring specialize...

Stryker - Android pentesting app with premium access now free until 2050!
Scan networks, launch exploits, and test web apps—all from your phone
Bonus: includes a list of suggested WiFi adapters and SimpleUSB tool for identifying USB devices on the go
www.mobile-hacker.com/2025/06/12/s...

Seeker: How a Simple Link Can Reveal Your Smartphone’s Location What if someone could pinpoint your smartphone's location and gather detailed device information without you ever installing a malicious app? This is precisely what the Seeker tool is designed to demo...

Locating Smartphones Using Seeker: How a Simple Link Can Reveal Your Smartphone’s Location
www.mobile-hacker.com/2025/06/10/s...

Transform Your Old Smartphone into a Pocket Cyberdeck with Kali NetHunter This setup serves as a convenient alternative to carrying a full-sized laptop or struggling with a smartphone’s virtual keyboard for complex technical tasks. It offers comfortable typing and an effici...

Transform Your Old Smartphone into a Pocket Cyberdeck with Kali NetHunter

Tutorial on how to 3D-print a minimalist palmtop-style case for Google Pixel 3 XL and install NetHunter on it with custom kernel
www.mobile-hacker.com/2025/06/06/t...

Analysis of Spyware That Helped to Compromise a Syrian Army from Within This case demonstrates that effective smartphone espionage doesn't always require expensive zero-day exploits or the development of sophisticated, custom and undetected spyware. Instead, attackers can...

Analysis of Spyware That Helped to Compromise a Syrian Army from Within
👉 Smartphone espionage doesn’t need expensive exploits. Cheap tools like SpyMax with targeted phishing a social engineering can breach even military targets - no 0-days required
www.mobile-hacker.com/2025/06/05/a...

Security Issues Found in preinstalled apps on Android Smartphones Security researchers have uncovered several critical vulnerabilities in applications preloaded on Ulefone and Krüger&Matz Android smartphones. These flaws, reported by CERT Polska, expose users to sig...

Vulnerabilities Found in Preinstalled apps on Android Smartphones

3rd party app installed on a device could misuse vulnerabilities to:
✅perform factory reset of device
✅exfiltrate PIN code
✅inject an arbitrary intent with system-level privileges
www.mobile-hacker.com/2025/06/02/s...

HackRF PortaPack H4M with Mayhem Firmware – A Powerful Handheld SDR Toolkit In the Q4 of 2024, a new SDR (Software Defined Radio) was released: the HackRF PortaPack H4M, shipping with the Mayhem firmware. Whether you’re a hobbyist, hacker, ham radio enthusiast, or security re...

I was playing around with new and smaller HackRF PortaPack H4M.
In a summary blog, you can find what's new with H4M, how to flash it, copy necessary data, and a couple of use-cases.
www.mobile-hacker.com/2025/05/19/h...

Feberis Pro: The Ultimate 4-in-1 Expansion Board for Flipper Zero In a previous blog post, I introduced Feberis, a versatile expansion board that enhanced the capabilities of the Flipper Zero by offering additional communication protocols. Now, I am excited to dive ...

Feberis Pro: I have tested a new 4-in-1 Expansion Board for Flipper Zero
www.mobile-hacker.com/2025/03/31/f...

EvilLoader: Unpatched Telegram for Android Vulnerability Disclosed A newly disclosed in Telegram for Android, dubbed EvilLoader, allows attackers to disguise malicious APKs as video files, potentially leading to unauthorized malware installations on users' devices.

EvilLoader: Yesterday was published PoC for unpatched vulnerability affecting Telegram for Android.
The exploit has been sold on underground forum since January 2025.
✅Don't install external players if requested by received corrupted video file on Telegram.
www.mobile-hacker.com/2025/03/05/e...

Building a Portable Kali Box with Raspberry Pi and Touchscreen In this guide, I will walk you through the process of setting up a Raspberry Pi with a 3.5-inch touchscreen running Kali Linux. This compact yet powerful setup is perfect for on-the-go penetration tes...

How to build portable Kali box with Raspberry Pi and Touchscreen

✅installation process
✅install drivers and switch output to touchscreen
✅allow auto-login
✅enable SSH as root
✅setup virtual keyboard
www.mobile-hacker.com/2025/02/26/b...

Bettercap on Android: A Portable Network Security Toolkit This setup is not only lightweight and portable but also ensures that a pentester can operate in plain sight, appearing as just another person on their phone. In this guide, we'll show you how to inst...

60-pages guide on how to use Bettercap on Android
www.mobile-hacker.com/2025/02/21/b...

Evil Crow RF: A Portable Radio Frequency Device This tool expands your smartphone’s capabilities, allowing you to dive into RF analysis, penetration testing, and signal manipulation—bringing mobile hacking to a whole new level.

Evil Crow RF: A Portable Radio Frequency Device compatible with Flipper Zero Sub-GHz file format
www.mobile-hacker.com/2025/02/11/e...

It is lilygo t-dongle

USB Army Knife: The Ultimate Close Access Penetest Tool Whether you want to transform into a USB Ethernet adapter and capture network traffic, create custom user interface for your attacks, or use covert storage devices, the USB Army Knife has you covered.

USB Army Knife: Close Access Pentest Tool

It is capable of remote keystroke injection, VNC, USB network adapter, EvilAP, Marauder, record microphone, controlled over web interface with fancy LCD screen
www.mobile-hacker.com/2025/01/24/u...

Boost Flipper Zero with FEBERIS: 3-in-1 SubGhz, NRF24, and WiFi board
www.mobile-hacker.com/2025/01/09/b...

Explore #Marauder firmware on Cheap Yellow Display with all of its features 👇
www.mobile-hacker.com/2024/12/23/e...

Install and run any firmware (Marauder, Bruce, Ghost ESP...) on ESP32 devices without using computer with M5Stick Launcher
www.mobile-hacker.com/2024/12/29/r...

Exploring Marauder, Bruce, and Ghost ESP on Cheap Yellow Device In this blog, I will focus on the most popular offensive security projects such as Marauder, Bruce and Ghost ESP to get most of this device and compare them in the end.

Exploring Marauder, Bruce, and Ghost ESP on Cheap Yellow Device
www.mobile-hacker.com/2024/12/23/e...

Detect ARP spoofing attack using Android app ARP spoofing attacks are often used in combination with other types of attacks, such as DNS spoofing, SSL stripping, and more. These attacks can be used to steal sensitive information, launch phishing...

How to detect ARP spoofing attacks using Android app
www.mobile-hacker.com/2024/12/16/d...

Bluetooth and Wi-Fi Jamming using Flipper Zero Jamming is a technique used to disrupt wireless communications by overwhelming the signal with interference. This blog post explores the concept of jamming using Flipper Zero, how it works, its applic...

Bluetooth and Wi-Fi Jamming using Flipper Zero
www.mobile-hacker.com/2024/12/12/b...

Cybercriminals Use NFC Relay to Turn Stolen Credit Cards into Cash without a PIN Mobile Hacker ThreatFabric has identified a new cash-out tactic that wasn’t seen before called “Ghost Tap”, which cybercriminals use to exploit stolen credit card details linked to mobile payment services like Goog...

How cybercriminals use NFC Relay to Turn Stolen Credit Cards into Cash without a PIN
www.mobile-hacker.com/2024/12/02/c...

Smartphone scareware: cracked screen as a result of virus This new technique mimics a cracked screen that is a result of a fake virus infection as visible in the video below

Mobile #scareware now mimics cracked smartphone screen as a result of a fake virus infection
www.mobile-hacker.com/2024/11/27/s...