<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Mobile Security on Hackpuntes</title><link>https://hackpuntes.com/categories/mobile-security/</link><description>Recent content in Mobile Security on Hackpuntes</description><generator>Hugo -- gohugo.io</generator><language>en-us</language><lastBuildDate>Wed, 15 Apr 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://hackpuntes.com/categories/mobile-security/index.xml" rel="self" type="application/rss+xml"/><item><title>Fridagate - Android Tool to Manage Frida and Intercept Traffic with Burp Suite</title><link>https://hackpuntes.com/posts/fridagate-android-pentesting-tool/</link><pubDate>Wed, 15 Apr 2026 00:00:00 +0000</pubDate><guid>https://hackpuntes.com/posts/fridagate-android-pentesting-tool/</guid><description>&lt;p&gt;&lt;a href="https://hackpuntes.com/images/fridagate-android-pentesting-tool/fridagate-banner.webp"&gt;&lt;img src="https://hackpuntes.com/images/fridagate-android-pentesting-tool/fridagate-banner.webp" alt="Fridagate - Android Tool to Manage Frida and Intercept Traffic with Burp Suite" loading="eager" decoding="async" /&gt;
&lt;/a&gt;
&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Fridagate&lt;/strong&gt; is an open source Android application designed for &lt;strong&gt;mobile application pentesters&lt;/strong&gt;. It allows you to manage &lt;strong&gt;frida-server&lt;/strong&gt;, intercept HTTPS traffic with &lt;strong&gt;Burp Suite&lt;/strong&gt;, and inject bypass scripts directly from the device — without having to run commands manually at the start of every audit session.&lt;/p&gt;
&lt;p&gt;The project was born out of a real need: during an Android app audit the usual workflow involves connecting via ADB, pushing frida-server, setting permissions, starting it, configuring the system proxy, adding iptables rules&amp;hellip; Fridagate automates all of that from a clean interface on the phone itself.&lt;/p&gt;</description></item><item><title>IPA Signing with Sideloadly</title><link>https://hackpuntes.com/posts/ios-ipa-signing-sideloadly/</link><pubDate>Sat, 13 Dec 2025 00:00:00 +0000</pubDate><guid>https://hackpuntes.com/posts/ios-ipa-signing-sideloadly/</guid><description>&lt;p&gt;&lt;a href="https://hackpuntes.com/images/ios_ipa_signing_sideloadly/ios_ipa_signing_sideloadly_banner.webp"&gt;&lt;img src="https://hackpuntes.com/images/ios_ipa_signing_sideloadly/ios_ipa_signing_sideloadly_banner.webp" alt="IPA Signing with Sideloadly" loading="eager" decoding="async" /&gt;
&lt;/a&gt;
&lt;/p&gt;
&lt;p&gt;In Apple&amp;rsquo;s closed ecosystem, arbitrary code execution is the first wall we hit. Historically, we relied on &lt;strong&gt;jailbreaks&lt;/strong&gt; to audit applications, but in corporate environments or with latest-generation devices (where a stable jailbreak might not exist), we need to adapt.&lt;/p&gt;
&lt;p&gt;This is where &lt;strong&gt;Sideloading&lt;/strong&gt; comes in. Essentially, we abuse Apple&amp;rsquo;s &lt;strong&gt;Free Developer Account&lt;/strong&gt; functionality to sign our own applications (or modified third-party apps) and deploy them to the target device. While tools like AltStore exist, today we focus on &lt;strong&gt;Sideloadly&lt;/strong&gt;, a Swiss Army knife that not only signs but facilitates on-the-fly dynamic library injection (&lt;code&gt;.dylib&lt;/code&gt; / Frida Gadgets).&lt;/p&gt;</description></item><item><title>Androdialer Writeup</title><link>https://hackpuntes.com/posts/8ksec/android/androdialer-writeup/</link><pubDate>Mon, 08 Dec 2025 00:00:00 +0000</pubDate><guid>https://hackpuntes.com/posts/8ksec/android/androdialer-writeup/</guid><description>&lt;h1 id="androdialer-the-ultimate-phone-experience"&gt;AndroDialer: The Ultimate Phone Experience&lt;/h1&gt;
&lt;h2 id="introduction"&gt;Introduction&lt;/h2&gt;
&lt;p&gt;Ever wanted to break free from the limitations of your regular Android dialer? &lt;strong&gt;&lt;em&gt;Meet AndroDialer!&lt;/em&gt;&lt;/strong&gt; A sleek, full‑featured dialer app that takes your calls to the next level.&lt;/p&gt;
&lt;p&gt;It brings together smart contact organization, customizable quick‑dial widgets, and a “Business Focus” mode that filters interruptions so you stay in control of every conversation. Behind the scenes, AndroDialer delivers in‑depth call analytics to help you spot communication trends, plus enhanced security features. Its highly adaptable interface is complete with light and dark themes, call‑time limits, and fully personalized settings that strike the ideal balance of efficiency and elegance for both personal and professional calling.&lt;/p&gt;</description></item></channel></rss>