Mikołaj Kurcin – Ethical Hacking

Use Frida to controll Unity app (IL2CPP)

March 15, 2021March 15, 2021Mikołaj Kurcin

In applications, changing variables or forcing execution methods during runtime can be really useful to bypass some security or even to write hacks. On Android, we can change binary libraries…Continue readingUse Frida to controll Unity app (IL2CPP)

Inject C++ in application (Unity IL2CPP)

March 10, 2021March 15, 2021Mikołaj Kurcin

Sometimes we want to add or edit some code in an application. If the app is built by Mono, there is no problem to achieve this goal. However, in case…Continue readingInject C++ in application (Unity IL2CPP)

Intercept non-HTTP communication via BurpSuite

February 18, 2021February 18, 2021Mikołaj Kurcin

Burp Suite doesn’t intercept non HTTP/WebSocket communication, however some apps use, for example, plain TCP connection. I wrote a simple python server and client that exchanged messages via the mentioned…Continue readingIntercept non-HTTP communication via BurpSuite

Fooling app with MockServer (HTTPS)

January 12, 2021January 13, 2021Mikołaj Kurcin

Sometimes the app’s communication is written in a way that cannot be intercepted by Burp Suite, OWASP ZAP, etc. but it’s still HTTPS communication. For example, I wrote an app…Continue readingFooling app with MockServer (HTTPS)

Hack any (not encrypted) communication

January 3, 2021January 3, 2021Mikołaj Kurcin

Modifying data transferred and received is one of the simplest ways to hack an app. For example, I created one that communicates with a server via sockets and they can…Continue readingHack any (not encrypted) communication

Basic cracking Wi-Fi WPA/WPA2 (Word List)

December 17, 2020December 17, 2020Mikołaj Kurcin

In every home, office, etc. we probably can find WiFi. Gaining access to access points is really useful if we want to hack someone connected to a specific one. Thanks…Continue readingBasic cracking Wi-Fi WPA/WPA2 (Word List)

Simple editing App’s RAM

December 8, 2020December 8, 2020Mikołaj Kurcin

Apps use variables and they are stored in RAM. It would be wonderful to have access to this memory, and fortunately for us it is really simple. We only need…Continue readingSimple editing App’s RAM

Hack Mono DLL

November 28, 2020December 7, 2020Mikołaj Kurcin

Modifying C# is a really easy task if code was compiled only to IL. In this form, files (DLLs) can be executed, so it’s possible to find apps with this…Continue readingHack Mono DLL

From SQL to shell access

November 22, 2020December 7, 2020Mikołaj Kurcin

SQL Injection is one of commonly known SQL vulnerabilities. It’s out of ordinary to see an unsecured implementation, it’s still possible to find it though. For me, one of the…Continue readingFrom SQL to shell access

Edit code in Unity APK (IL2CPP)

November 16, 2020December 7, 2020Mikołaj Kurcin

Unity android app can be build in 2 ways: Mono – DLL can be simply reversed to C# L2CPP – where C# code is compiled directly to binary files for…Continue readingEdit code in Unity APK (IL2CPP)