Welcome to Stray Voltage A site about security, hacking, hardware, reverse engineering and CTFs. ...
Write-ups exist for this lab in abundance but I had some specific problems with this one and wanted to document the work-arounds. The lab is called Pinned and is available in HTB's mobile exploitation track. Lab Setup I initially set up an android 10, API 29 emulator like the readme recommended. When I did this I encountered this issue , and since no resolution exists there I set my lab up using…
This writeup details the solution to the Food Store challenge available here: https://www.mobilehackinglab.com The lab requires static analysis of the APK file to identify a SQL injection vulnerability in the user registration process which allows for sign up at a higher privilege level. App Exploration Initially running the app brings us to a log in screen but we can also sign up: The advisory…
I sometimes use these cheatsheets by pentestmonkey, and I noticed that it said it isn't possible to make DNS requests with MySQL with a "?". DNS requests are used in OAST (Out-of-band Application Security Testing) techniques to infer that an application is vulnerable to SQL injection when other methods fail. Or more simply, if we can make a server perform DNS lookups we have at least some element…
The best thing about Metasploit is you already most likely know how to use it. I've tried other free C2's like Sliver and Havoc but every time I try to use them I find some edge case that they cannot do that Metasploit does easily 1 . So let's start using Metasploit like a pro! The following post improves on the tradecraft taught by Offensive Security in their OSEP course - and would work well for…
A buffer overflow is a software vulnerability that in some cases allows an attacker to take control of the application logic and can be used to either gain access to a host or elevate privileges on an already compromised host depending on how the application is configured. I first discovered Buffer Overflows through Heath Adams (The Cyber Mentor) video series that I think does a great job of…
GPT-5 is not a good web application tester in 2025 and I believe many of the claims about Agentic AI pentest are inflated. Through my own experiments and a review of the claims about Agentic AI, I conclude that people and not AI are still leading the way in web application testing. Introduction I always think of Penetration Testing as a slightly niche skill, it doesn't usually take too long, and…
This writeup details the solution to the Strings challenge available here: https://www.mobilehackinglab.com The lab requires static analysis of the android APK file to identify methods which need to be called with frida. Finally, the flag can be retrieved by scanning the memory of the application. Initially running the application shows the following: Step 1: Static Analysis of the APK There are…
This post details the steps to gain remote code execution on the Mobile Hacking Lab challenge Guess Me available here: https://www.mobilehackinglab.com I really enjoyed this challenge, it was difficult without being unsolvable which is the gold standard for labs in my opinion. Step 1: Static Analysis of the APK file. The APK can be recovered from the target device using: adb shell pm list packages…