reeeeaway

7 ms·

1. 1.▲
   by reeeeaway 2y ago

   Alternatively, give frida a go. It handles all the hard parts for you magically and then you get to instrument the binary with Javascript :) mixing dynamic and static techniques is really powerful
2. 2.▲
   by reeeeaway 2y ago

   On newer versions of android it can be hard to install a root cert and trust it; mitmproxy and httptoolkit both have some great guides though. On iOS its easier - but yeah unfortunately/fortunately certificate pinned applications wont
3. 3.▲
   by reeeeaway 2y ago

   Certificate pinning perhaps?
4. 4.▲
   by reeeeaway 3y ago

   The method doAppendEscapeLiteral (Line 66) is a good example; https://github.com/pgjdbc/pgjdbc/blob/master/pgjdbc/src/main... I didn’t take notes all the way down, but at the end of the day thi
5. 5.▲
   by reeeeaway 3y ago

   Looking at the postgres JDBC source, it sanitizes parameters when prepared statements and parameterization is used. Different implementations may do different things here though
6. 6.▲
   by reeeeaway 5y ago

   Company xyz is hiring, amazing place to work blah blah, you would be perfect! Then the email is CCed to 50 other students and you find out the guy sending it only started at the company last month and gets paid a large bonus for whatever sh