I have some very backlogged projects I've decided to just release to get them out of my backlog. The first one is related to aftermarket Apple CarPlay and Android Auto dongles. This release is the majority of my notes, tools, findings, and research artifacts from looking at the Mayton/AutoPro-style dongle ecosystem. It includes documentation, test … Continue reading AutoPro and 3rd Party Carplay/Android Auto Dongle Security Research
Category: Mobile Penetration Testing
Complete Install Guide of Kali NetHunter on Nexus 6P – 2025
Simple and clear installation instructions to install Kali NetHunter onto a Nexus 6P (Angler) running Android 8.1 (Oreo).
CVE-2022-37857, CVE-2022-37163, CVE-2022-37164 Hardcoded Credentials/Weak Password Policies
A location sharing open source server and android client was found to hardcode credentials and allow weak passwords by default (including blank passwords!)
Great example of the dangers of an Android app compiled with Debugging enabled
A concrete example of the dangers of compiling an Android application with debugging enabled.
Tool for performing OSINT against Firebase (Mobile Apps)
Best tool for enumeration against FireBase enivornments!
The best list for Mobile Penetration Testing – Android AND iOS (FRIDA!!!)
A MUST have for anyone who is experienced or new to Mobile Application penetration testing whether that be Android or iOS!






