How hard can it be to build Frida natively on Android/Termux(without NDK?)
https://qbtau.in/posts/building_frida_on_termux/
Published: May 11, 2026 00:00
Seriously, How hard can it be?
🦜 Abhi's Blog
@qbtau.in@rss-parrot.net
I'm an automated parrot! I relay a website's RSS feed to the Fediverse. Every time a new post appears in the feed, I toot about it. Follow me to get all new posts in your Mastodon timeline! Brought to you by the RSS Parrot.
---
Recent content on Abhi's Blog
Site URL: qbtau.in/
Feed URL: qbtau.in/index.xml
Posts: 18
Followers: 1
CVE-2026-33989: Arbitrary file write via Path Traversal in Mobile MCP
https://qbtau.in/posts/cve-2026-33989/
Published: March 28, 2026 00:00
I discovered an arbitrary file write with path traversal vulnerability in @mobilenext/mobile-mcp version 0.0.48 and below, with over 60k+ downloads monthly.
OneList CTF Writeup
https://qbtau.in/posts/onelist_ctf/
Published: September 22, 2025 00:00
Write-ups for the OneList CTF
Sigmatcher: Effortlessly Matching Java Classes and Methods Across APK Versions
https://qbtau.in/posts/sigmatcher/
Published: June 23, 2025 00:00
I’ve been there, countless times wrestling with obfuscated or version-changed APKs, hunting for specific classes or methods. Manually analyzing code became a tedious nightmare.
LYADI - Let Your Ai Do It
Published: April 16, 2025 00:00
Let Your AI Do It An MCP (Model Context Protocol) Server specifically designed to help with reverse engineering tasks, majorly focused on Android side. This guide walks you through setting up and using the MCP server on Termux for Android to assist with…
Identifying `ssl_verify_peer_cert` in Android Flutter Binaries
https://qbtau.in/posts/flutter_ssl/
Published: February 1, 2025 00:00
Ok so, here we go again…
How to Use PineHook+
https://qbtau.in/posts/pinehookplus/
Published: December 31, 2024 00:00
Overriding Default Values of Android Constructor Parameters at Runtime
Published: October 29, 2024 00:00
Ever found yourself needing to override default values within an Android class constructor without modifying the original codebase? Here, we’ll explore a solution using two powerful tools: Frida and Pine. These dynamic hooking libraries allow you to modify…
How to Add Toast & Dialogue Box to Flutter Apps via Smali
https://qbtau.in/posts/flutter_toast/
Published: September 21, 2024 00:00
If you’re familiar with modifying Android apps, you know that smali can be an excellent tool for tinkering with app behavior. Today, we’re diving into adding Toast messages and Dialogue Boxes in Flutter apps by modifying the MainActivity.smali file. You…
Comprehensive Guide for Setting Up and Using TIK Tool on Debian WSL
https://qbtau.in/posts/tik_rom_setup/
Published: September 4, 2024 00:00
This guide provides a detailed, step-by-step process for setting up Debian on Windows Subsystem for Linux (WSL), installing necessary tools, and using the TIK tool for ROM modification.
About Me
Published: August 31, 2024 00:00
Abhi / AbhiTheModder Mobile security researcher and reverse engineer focused on Android internals, application security, Dalvik/Smali, Flutter/Dart, Frida/Pine instrumentation, radare2, and Termux-first tooling. I build tools around the problems I hit…
ARM Architecture Debate: SL vs. THR Registers in Dart AOT true/false
https://qbtau.in/posts/dart_arm_registers/
Published: August 31, 2024 00:00
SigTool: APK Signature Analyzer Pro - Review and Enhancements 🚀
https://qbtau.in/posts/sigtool/
Published: August 15, 2024 00:00
SigTool is a robust open-source tool tailored for developers and security analysts. It excels at in-depth APK signature analysis, offering features such as:
How Dart Loads Objects from Its Object Pool on ARM64 and ARM32 🛠️
https://qbtau.in/posts/dart_objects/
Published: July 14, 2024 00:00
Dart’s object loading mechanism differs slightly depending on the architecture it’s running on, be it ARM64 (ARMv8) or ARM32 (ARMv7). In this guide, we’ll explore how Dart loads objects from its object pool on these architectures and provide examples to…
Blutter Termux Guide: Setup, Usage, and Updates 📱💻
https://qbtau.in/posts/blutter_termux/
Published: February 12, 2024 00:00
Blutter is a powerful tool for reverse engineering Flutter apps, and you can run it directly on your Android device using Termux. Here’s a complete guide on how to install, use, and update Blutter in Termux. Let’s dive in! 🎥 Video Guide: While there are…
How Lucky Patcher works on some flutter apps."
Published: September 1, 2023 00:00
Ever wondered how Lucky Patcher can manipulate Flutter apps, especially those written in Dart? Dart is an object-oriented programming language with a C-style syntax, and Flutter is an open-source framework developed by Google for building natively…
Good News for Non-Root Users: View Data on Non-Rooted Devices with MT Manager 🎉
https://qbtau.in/posts/mt_local_storage/
Published: March 19, 2023 00:00
MT Manager just got a fantastic update! 🚀 Now, non-root users can easily access and view data on rooted devices, making it a breeze to find the dump.dart file without needing root access or App Cloner. Here’s how you can take advantage of this update.
How to Use reFlutter for Extracting Dart Code from APKs 🛠️
https://qbtau.in/posts/reflutter_usage/
Published: October 30, 2022 00:00
ReFlutter is a handy tool that allows you to reverse engineer Flutter apps and extract Dart code, monitor network trafic from APKs. Here’s a step-by-step guide on how to use reFlutter: