阿成的技術部落格

摘要:Android Browser Same Origin Policy Vulnerability 漏洞利用實戰與防禦說明

Android系統上預先安裝好的App（放在「/system/app」下）通常為了效能都會優化成「odex檔案」+「沒有classes.dex在內的APK」
但若想要單獨變成一個可執行的APK，裡面就一定要有classes.dex
因此這篇就是在講如何從已經被原廠優化的odex變成一個完整的apk

The website can be used to find HeartBleed vulnerability: http://filippo.io/Heartbleed
But it will not show the detail and leaking informaiton.
Most of the POC are using Python or C/C++, making it hard for general people to use.
Today, I made a HeartBleed quick and dirty PoC(Proof-Of-Concept) program on Windows.

摘要:Flickr latest Android app(Version: 2.1.5) ContentProvider security issue

摘要:Android安全機制與sandbox機制詳解