https://patali09.github.io/github, patali, blog, offensive security, mobile security, application security, web security, research 2026-07-15T08:50:03+05:45 Niraj Neupane https://patali09.github.io/ Jekyll © 2026 Niraj Neupane /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png 2026-06-27T19:05:00+05:45 2026-07-15T08:49:38+05:45 https://patali09.github.io/posts/DroidCave-Secure-Password-Management/ Niraj Neupane

Description In the given challenge we were provided with a DroidCave.apk, which was basically a password manager. Our goal is to develop a malicious Android application with an innocent appearance that can, with just one click of a seemingly normal button, steal both plaintext passwords and the decrypted form of encrypted passwords from the DroidCave database. Saving couple of password Anal...

2026-06-10T11:55:00+05:45 2026-07-15T08:49:38+05:45 https://patali09.github.io/posts/AndroDialer-The-Ultimate-Phone-Experience/ Niraj Neupane

In this challenge, AndroDialer.apk was provided. On installing it on a device running Android 16, it looks like a call app with Dialer, Contacts, and Recent features. Dialer Screen of AndroDialer Our Goal Create a malicious application that exploits the AndroDialer application to initiate unauthorized phone calls to arbitrary numbers without the victim’s consent. Analysis As the first ste...

2026-05-25T19:25:00+05:45 2026-07-15T08:49:38+05:45 https://patali09.github.io/posts/AndroPseudoProtect-The-Ultimate-Device-Security/ Niraj Neupane

After installing the app on our Android 16 device, we see a Start Security button that encrypts files on external storage. Our goal is to silently disable this encryption and read the decrypted files. Landing page of AndroPseudoProtect apk. As the first step of our analysis, we opened the target application in jadx-gui and inspected AndroidManifest.xml. At a glance, we noticed that the com.e...

2026-05-15T19:20:00+05:45 2026-07-15T08:49:38+05:45 https://patali09.github.io/posts/FactsDroid-Your-Universal-Knowledgebase/ Niraj Neupane

At first, we install the app on an Android device. On opening it, we get a security warning due to the rooted device, and the Random Fact button is also disabled. Opening app on a rooted device We open the application in jadx and go to Resources > lib > arm64-v8a. There are two files, libapp.so and libflutter.so, which confirms that the app is built with the Flutter framework. Openin...

2026-03-27T11:55:00+05:45 2026-03-28T23:31:50+05:45 https://patali09.github.io/posts/Biometric-Implementation-in-Android-What-could-possibly-go-wrong/ Niraj Neupane

The App: A Tale of Two Implementations The app we are looking at is called biometric (com.example.biometric). It lets a user enroll with a username and password, then log in using their fingerprint. Simple enough. The APK and source are available at github.com/patali09/Frida-Challenges/tree/main/Biometric But here is the twist - it has two modes: Mode What It Does ...