⚡ Stray Voltage

Write-ups exist for this lab in abundance but I had some specific problems with this one and wanted to document the work-arounds.

This writeup details the solution to the Food Store challenge available here: https://www.mobilehackinglab.com The lab requires static analysis of the APK file to identify a SQL injection vulnerability in the user registration process which allows for sign

I sometimes use these cheatsheets by pentestmonkey, and I noticed that it said it isn't possible to make DNS requests with MySQL with a "?".

The best thing about Metasploit is you already most likely know how to use it.

A buffer overflow is a software vulnerability that in some cases allows an attacker to take control of the application logic and can be used to either gain access to a host or elevate privileges on an already compromised host depending on how the applicat…

GPT-5 is not a good web application tester in 2025 and I believe many of the claims about Agentic AI pentest are inflated.

This writeup details the solution to the Strings challenge available here: https://www.mobilehackinglab.com The lab requires static analysis of the android APK file to identify methods which need to be called with frida.

This post details the steps to gain remote code execution on the Mobile Hacking Lab challenge Guess Me available here: https://www.mobilehackinglab.com I really enjoyed this challenge, it was difficult without being unsolvable which is the gold standard f…