Welcome to the AllSafe’s hub. Choose ctf below to view detailed solutions.

Flag17 - arbitrary code execution

Writeups for Flag17 - arbitrary code execution

Flag1 - insecure logging

Writeups for Flag1 - insecure logging

Flag10 - insecure broadcast receiver

Writeups for Flag10 - insecure broadcast receiver

Flag14 - insecure service

Writeups for Flag14 - insecure service

Flag16 - insecure providers

Writeups for Flag16 - insecure providers

Flag15 - object serialization

Writeups for Flag15 - object serialization

Flag12 - certificate pinning

Writeups for Flag12 - certificate pinning

Flag3 - firebase database

Writeups for Flag3 - firebase database

Flag13 - weak cryptography

Writeups for Flag13 - weak cryptography

Flag19 - smali patch

Writeups for Flag19 - smali patch

Flag5 - sql injection

Writeups for Flag5 - sql injection

Flag8 - secure flag bypass

Writeups for Flag8 - secure flag bypass

Flag2 - hardcoded credentials

Writeups for Flag2 - hardcoded credentials

Flag4 - insecure shared preferences

Writeups for Flag4 - insecure shared preferences

Flag11 - vulnerable webview

Writeups for Flag11 - vulnerable webview

Flag6 - pin bypass

Writeups for Flag6 - pin bypass

Flag7 - root detection

Writeups for Flag7 - root detection

Flag18 - native library

Writeups for Flag18 - native library

Flag9 - deep link exploitation

Writeups for Flag9 - deep link exploitation