iOS

The pentest report landed on a mobile lead’s desk last quarter and the first finding was a single sentence: the application accepts any HTTPS certificate after a one-line Frida hook. Within ninety seconds of attaching to the running process, the tester had captured login traffic in plaintext, lifted a session token, and pivoted to the … Read more