This bit of the internet exists as a hub for my portfolio, hobbies, and informal writeups concerning mobile security research and vulnerabilities.
~Branden

Writeups and authored tools

Machina, a scalable and recursive binary analysis pipeline.
AT&T Drivemode Android Bug Bounty a bug bounty report for AT&T's Drivemode Android application.
CSAW CTF 2018 Writeups is a writeup of the Web50 and Misc100 challenges for CSAW CTF 2018.
Discovering Code Paths in APKs Pt1. is a writeup and brain dump of analysis of NetworkX output from Mercator for use in informing vulnerability discovery and testing.
VolgaCTF 2018 Old Government Site Web 150 is a writeup of a web CTF challenge in VolgaCTF 2018.
BackdoorCTF 2018 bf-captcha-revenge-web-150 is a writeup of a web CTF challenge in BackdoorCTF 2018.
Iris is a docker port of google-play-apps-crawler-scrapy
Mercator is a visual reverse engineering aid for analyzing inter-component and class communication of Android applications using graph theory
Safespace is a wireless pattern of life sensor that uses Scapy to detect devices at layers 1 and 2. A display is generated as a bokeh plot.
Stumble is a small command-line tool for searching and extracting static files packaged inside of APKs.
es_file_exporter -- a vulnerability writeup on the Android application "ES File Explorer"