https://s11research.com/A computer security group focused on low-level debugging, reverse engineering, and vulnerability research. 2026-03-30T02:30:34+00:00 Signal 11 Research https://s11research.com/ Jekyll © 2026 Signal 11 Research /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png 2024-12-11T00:00:00+00:00 2024-12-11T20:36:10+00:00 https://s11research.com/posts/Messenger-Group-Call-DoS-for-iOS/ Signal 11 Research

Messenger is used by hundreds of millions of people globally, and as of December 2023, it has adopted end-to-end encryption (E2EE) by default for chats and calls. However, when a group chat is created, it initially does not use E2EE. Interestingly, non-E2EE groups have access to certain features that are unavailable in their E2EE counterparts. One such feature, highlighted in this write-up, is ...

2024-06-30T00:00:00+00:00 2024-06-27T18:34:55+00:00 https://s11research.com/posts/Visualizing-Android-Code-Execution-Pt.3/ Signal 11 Research

In part one and part two we looked at how to visualize Android native execution in Ghidra. That’s really useful but there is another significant portion of Android, the Java layer, which does not have an amazing solution for visualizing execution. This write-up introduces FlowFinder, an open-source web tool, which aims to provide a way to visualize Java execution via annotated control-flow gra...

2024-06-14T00:00:00+00:00 2024-06-27T15:59:35+00:00 https://s11research.com/posts/Visualizing-iOS-Code-Execution/ Signal 11 Research

TL;DR: This write-up covers the tools and methods used to visualize iOS code execution. The techniques for visualizing native and Objective-C execution are demonstrated using TrollInstallerX. The tools included in this write-up are: Frida, Lighthouse, blacktop ipsw, DyldExtractor, Ghidra, Cartographer. Temporary builds of Cartographer and Lighthouse’s frida-drcov.py file are stored here while t...

2023-07-24T00:00:00+00:00 2024-06-14T02:55:03+00:00 https://s11research.com/posts/Debugging-Android-with-LEFF/ datalocaltmp

In my previous blog I wrote about using LLDB with Voltron to debug native Android binaries; I found this to be the most comparable to GDB with the popular GEF extension and it worked quite well for myself. Since then I’m happy to say that Foundry Zero has released LLEF which gives a very similar experience to GEF for LLDB. In this short write-up I’ll describe my experience with installing t...

2023-07-17T00:00:00+00:00 2023-07-17T00:00:00+00:00 https://s11research.com/posts/Visualizing-Android-Code-Execution-Pt.2/ datalocaltmp

In part one of this series I described how to visualize Android application code execution using Dragon Dance + Frida + Lighthouse + Ghidra. Though there is one big hang-up, what if you don’t have root or want to examine a non-app process. Fear not! For those of us who want to brave the world of non-app processes or are condemned to the lowly shell user, there is another solution explained wit...