[ Set 0x01 // By Nora ]
OffsetZer0
Memory tells the truth.
- 0x00 Creating a Google Phishlet for Evilginx How I created a phishlet for Google's authentication flow for Evilginx, covering the 11 subdomains, 20+ session cookies, and the JavaScript injection needed to handle Google's streaming push channel.
- 0x01 Hermit Android Surveillanceware Two post-disclosure Hermit Android builds from the same operator campaign show a thin dropper, deleted runtime modules, core-brokered Android privileges, and a stage-2 protobuf crypto protocol.
- 0x02 Coruna iOS Exploit Kit Reverse engeenering of the government-grade iOS exploit kit identified by GTIG in February 2025.