https://pwnxpl0it.github.io/Pwnxpl0it's blogA blog all about coding/hacking, building and breaking things 2025-02-18T15:48:57+00:00 Mohamed Tarek https://pwnxpl0it.github.io/ Jekyll © 2025 Mohamed Tarek /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png Android APK Analysis: A Beginner's Guide2025-01-28T00:00:00+00:00 2025-02-18T15:48:07+00:00 https://pwnxpl0it.github.io/posts/APK-Reverse/ Mohamed Tarek Learn how to analyze Android APK files, explore their structure, and understand essential components like Smali, AndroidManifest.xml, and more. Android Architecture and Security Model Overview2025-01-16T00:00:00+00:00 2025-01-21T06:02:58+00:00 https://pwnxpl0it.github.io/posts/Android-Architecture-and-Security-model-overview/ Mohamed Tarek An overview of Android's architecture, including its layers, security model, and virtual machines. Whiterose - THM writeup2024-09-20T11:35:02+00:00 2024-09-20T11:35:02+00:00 https://pwnxpl0it.github.io/posts/Whiterose-THM-writeup/ Mohamed Tarek Hi, Here is my writeup for Whiterose Machine Recon # Nmap 7.95 scan initiated Sat Nov 2 18:35:59 2024 as: nmap -sT -sV -T4 -vv -oN cyprusbank.txt cyprusbank.thm Nmap scan report for cyprusbank.thm (10.10.8.213) Host is up, received syn-ack (0.31s latency). Scanned at 2024-11-02 18:36:00 EET for 21s Not shown: 998 closed tcp ports (conn-refused) PORT STATE SERVICE REASON VERSION 22/tcp ope... U.A. Highschool THM writeup2024-08-27T11:50:26+00:00 2024-09-07T02:47:24+00:00 https://pwnxpl0it.github.io/posts/U.A.-High-School-THM-writup/ Mohamed Tarek Hello there this is my writeup for U.A. Highschool - THM Recon Starting with the Nmap scan # Nmap 7.60 scan initiated Tue Aug 27 13:31:23 2024 as: nmap -sT -sV -T4 -p- -oN nmap.txt -vv 10.10.15.187 Nmap scan report for highschool.com (10.10.15.187) Host is up, received arp-response (0.0061s latency). Scanned at 2024-08-27 13:31:23 BST for 10s Not shown: 65533 closed ports Reason: 65533 conn-... Understanding Insecure Deserialization with Practical Examples2024-07-19T21:30:53+00:00 2024-07-29T02:22:31+00:00 https://pwnxpl0it.github.io/posts/Insecure-Deserialization/ Mohamed Tarek In this article, I will explain Insecure Deserialization. I will also demonstrate this by writing a simple vulnerable Python server and exploiting it. Before we begin, we need to understand what objects are, what serialization and deserialization are, and some basic networking concepts. Let’s start! What are objects ? In object-oriented programming (OOP), objects are the basic entities that...