Mobile & system security
Analyze Android components, Binder and content providers, WebViews, and cross-sandbox boundaries, following privilege delegation, authentication, installation, and update flows.
Android · Binder · Provider · WebViewIndependent security researcherSecurity research,
Security research,
from code to impact.
Reverse engineering, mobile security, and evidence-driven vulnerability research.
The work behind the notes.
I study binary security, mobile system components, and IoT and network devices. Starting with firmware, protocols, and runtime behavior, I trace data flows, privilege boundaries, and the root causes of vulnerabilities.
My work spans attack-surface modeling, vulnerability discovery, dynamic validation, impact assessment, and reporting. These notes document the analysis, experimental evidence, and questions that remain open.
Mobile security research
OPPO SRCOPPO / ColorOS
Research into Android system components and cross-application trust boundaries, including Binder and content providers, WebViews, installation and update flows, and file handling.
- 2026 SRC contribution points
- 21,950
- High-severity findings
- 7
- Medium-severity findings
- 11
Figures reflect the resume record and are not updated in real time.
- Code execution and local privilege escalation
- Privilege delegation and installation flows
- Authentication and account security
- Cross-sandbox information disclosure
- Path traversal and file overwrite
- WebViews and business logic
Findings are documented with reproducible proofs of concept, environment records, negative controls, and cleanup evidence, followed by version retesting, impact validation, and root-cause analysis.
Across layers of a system.
Binary & firmware research
Research x86, x64, ARM, and MIPS targets through firmware extraction, unpacking, emulation, and taint analysis, investigating memory corruption, command injection, unauthorized access, and privilege escalation.
x86 / x64 · ARM · MIPS · ROP · UAFDynamic analysis
Connect static call graphs, source review, and patch differences with runtime arguments and call traces. Use minimal proofs of concept to validate actual data flows and impact.
Frida · Burp · ADB / logcat · DebuggersResearch engineering
Build security tools and Agent / CLI workflows in Python, Go, and Java. Design modules, interfaces, and data flows that connect retrieval, probes, and reporting into reusable research tasks.
Python · Go · Java · Agent / CLIFrom a finding to evidence.
Model the boundary.
Record target versions, callers, and required privileges to define the attack surface and scope of validation.
Test the impact.
Combine static and dynamic analysis with ordinary-app attack paths and negative controls to test actual impact.
Keep the evidence.
Use research ledgers, candidate queues, and evidence inventories to distinguish static leads, dynamically confirmed behavior, and reportable findings.
Selected honors.
- NEW2026
Bay Area Cup
Champion, individual finals
- 2025
Wanggu Cup
First prize, individual open track
- 2025
Inaugural CCF Automotive Security Challenge
Third prize
- 2023
Yangcheng Cup
First place online · Third prize in the enterprise finals
- 2023
WIDC Topsec Information Security Challenge
Second place online
- 2020
ISG Cybersecurity Skills Competition
Second prize · Second place in the education division
- 2020
National Industrial Internet Security Skills Competition
Third prize
- 18th edition
National Collegiate Information Security Technical Competition
National first prize
- 13th edition
National Collegiate Information Security Competition
First prize, Southwest region
Continue the conversation.
Technical conversations, article corrections, and research discussions.
f0und@foxmail.com ↗GitHub ↗