Blog

Research and notes

• 2026-10-12Abdullah Ahmed, CEOOne tap, no trace: silent KYC image exfiltration from Android appsHow an exported cropping activity, an over-broad FileProvider and an Android IPC blind spot combine to let a co-installed app silently steal cached KYC document images from fintech apps — and how to close all three holes.android / kyc / fileprovider / sandbox-escape8 min read
• 2026-09-04Abdullah Ahmed, CEOMinted URLs, untrusted fetches: full-read SSRF through on-chain NFT metadataHow an NFT metadata proxy running behind a major browser's wallet feature fetched attacker-chosen URLs straight from on-chain data, unauthenticated, and reflected the responses back — a full-read SSRF one hop from cloud IAM credentials. Class-level write-up, vendor redacted.ssrf / nft / solana / cloud8 min read