security research & writeups

Hacking, breaking, building — and writing it all down.

Notes from hacking, breaking, and building. Written down in case they're useful to someone, someday.

Read latest writeup github.com/f3rb123
Beetle — Mobile Application Static Security Platform, Explained
Featured · Mobile SAST Jul 2026 · 12 min

Beetle — Mobile Application Static Security Platform, Explained

A full walkthrough of Beetle, the open-source mobile SAST platform I built — running it with Docker, the scan workflow, every panel in the interface, and how the unpacking, detection, taint, and attack-chain engines actually work.

latest writeups
all posts →
Beetle — Mobile Application Static Security Platform, Explained
Mobile SAST

Beetle — Mobile Application Static Security Platform, Explained

A full walkthrough — running it with Docker, the scan workflow, every panel in the interface, and how the unpacking, detection, taint, and attack-chain engines work under the hood.

Jul 2026·12 min
iOS · Android
iOS · Android

K!ll Fl!utter: automating Flutter SSL pinning bypass

Pattern-scanning ssl_verify_peer_cert across architectures, then emitting a Frida hook that actually works — including QUIC/HTTP3 targets.

Coming soon

New writeups, straight to your inbox

One email per post. Mobile security research, bug bounty findings, and tool releases. No newsletter filler.