iiinova — where your digital self keeps evolving

Reposted by Abhi

pancake @trufae.bsky.social · 12/06/2026

New release of r2hermes! The plugin for reverse engineering React Native apps with #radare2 In short, i've added SBOM listings, improved decompiler output, better overlapped strings support as well as much better SLP objects integration with latest radare2 from git! github.com/radareorg/r2...

032

Abhi @qbtau.in · 11/05/2026

Built Frida natively on Termux. No NDK, no cross-compilation. Took 2 years of failed attempts, 12 Android-specific patches, and a vacation without my laptop to figure it out. qbtau.in/posts/buildi...

qbtau.in

How hard can it be to build Frida natively on Android/Termux(without NDK?)

Seriously, How hard can it be?

110

Abhi @qbtau.in · 13/04/2026

It’s finally here: radare2 + Warp (warrp) ⚡️ This makes r2 the first tool outside of the @binary.ninja ecosystem to adopt the format. Huge thanks to Mason (from @binary.ninja) and @trufae.bsky.social for their invaluable feedback's during development. github.com/radareorg/warrp

github.com

GitHub - radareorg/warrp: A native radare2 plugin for the WARP signature format

A native radare2 plugin for the WARP signature format - radareorg/warrp

042

Abhi @qbtau.in · 04/04/2026

hmm, hmm...😋

000

Abhi @qbtau.in · 28/03/2026

Excited to share that I've got my first-ever CVE 🥳 I found a High-Severity Path Traversal vulnerability (CVE-2026-33989) in [@]mobilenext/mobile-mcp (60k+ monthly downloads). qbtau.in/posts/cve-20... #CyberSecurity #Infosec #CVE #AppSec #MCP

qbtau.in

CVE-2026-33989: Arbitrary file write via Path Traversal in Mobile MCP

I discovered an arbitrary file write with path traversal vulnerability in @mobilenext/mobile-mcp version 0.0.48 and below, with over 60k+ downloads monthly.

030

Abhi @qbtau.in · 17/02/2026

Now, it's possible to run Facebook(Meta)'s Mariana Trench static analysis tool on Android (Termux) Spent some time fixing the build issues and scripted the process for Termux. github.com/AbhiTheModde...

github.com

000

Abhi @qbtau.in · 15/02/2026

r2web now has a built-in code editor 🤟, Edit radare2 scripts right in-browser, Fully mobile UI friendly as always. #radare2

000

Abhi @qbtau.in · 14/02/2026

Android 17 beta 1 is here (android-developers.g...) Static final fields now truly final An attempt to do so via reflection (and deep reflection) will always lead to IllegalAccessException, modifying them via JNI’s SetStatic<Type>Field methods family will lead to crash. 1/3

android-developers.googleblog.com

The First Beta of Android 17

News and insights on the Android platform, developer tools, and events.

151

Reposted by Abhi

Binary Ninja @binary.ninja · 28/01/2026

Join us today from 3-5pm ET to learn to recognize and apply types to decompiled C++ that's using virtual functions, inheritance, and vtables. We'll recover missing parameters, apply types, clean up decompilation, and everything else you need to get started reversing C++! youtube.com/live/QmsUmvH...

youtube.com

Beginner C++ Reverse Engineering - Binary Ninja Live Stream

Learn how to recognize and apply types to decompiled C++ that's using virtual functions, inheritance and vtables, recognize and recover missing parameters, a...

074