emailof911 | Security Researcher

$ whoami

emailof911

security researcher // foucused on Android & iOS

write-ups

How a popular Android image cropping library silently exposed thousands of apps to Arbitrary File Overwrite (AFO).

How a cropper library shipped an exported activity + root-scoped FileProvider to half the Play Store, and what we can actually do with the resulting file I/O primitive.

Android File Theft CTF