- Published on
When Security by Obscurity Blinds the WAF: From Client-Side Encryption to Critical SQL Injection (Part 2)
Reverse Engineering Client-Side Encryption, Building a Burp Extension, and Bypassing the WAF via OOB SQL Injection
Just Mobile Security
We provide professional services to companies, helping reduce the risk of attacks against their mobile applications, web services, and backend APIs.
Our assessments combine automated analysis with expert review and AI-assisted triage.
Powered by
Our assessments combine automated analysis with expert review and AI-assisted triage for evidence gathering, investigation, reasoning, and impact analysis, enabling agent-driven mobile security audits.
All of this is possible thanks to TUNGSTENIC, the mobile security platform developed by Just Mobile Security.
Our services
Mobile Penetration Testing
Based on OWASP methodologies and on the experience of our consultants. We analyze your mobile applications (Android/iOS) in search of potential vulnerabilities, associated with the application development stage
Know Your Customer
If your company is experiencing fraud related to identity validation and biometric verification, we can provide a solution. We help your organization assess the implementation of facial recognition and identity verification SDKs used in mobile applications (Android & iOS), regardless of whether the development is native or hybrid.
Web Penetration Testing
We are aware of the sensitive information of our clients, and therefore we understand the need to protect and safeguard the transfer of information made by mobile applications
Network Penetration Testing
Our Ethical Hacking Penetration Testing for External and Internal Networks aims to uncover vulnerabilities or weaknesses that demand immediate attention, potentially leading to economic losses or harm to the company or network owner.
Trainings
COMPANIES THAT TRUST US
Incoming events
| Event name | Type | Date | Place | |
|---|---|---|---|---|
 | Black Hat USA 2026 | Conference | Aug 1, 2026 / Aug 6, 2026 | Mandalay Bay Convention Center, Las Vegas |
 | DEF CON 34 | Conference | Aug 6, 2026 / Aug 9, 2026 | Las Vegas Convention Center, Las Vegas, NV |
 | Ekoparty Buenos Aires 2026 | Conference | Oct 7, 2026 / Oct 9, 2026 | Centro de Convenciones Buenos Aires |
Latest posts
- Published on
When Security by Obscurity Blinds the WAF: From Client-Side Encryption to Critical SQL Injection (Part 1)
Mapping Client-Side Encryption Across LATAM Banking and Fintech Apps
- Published on
Android Mobile Game Hacking (Part 2)
Previously, we covered the fundamentals of Android Sandbox and the basics of memory scanning. We learned how to find and “freeze” values in a game’s memory while it’s running to gain immediate advantages.
- Published on
Exploring Android Protections on RASP Times
This first part of our series on Android Game Hacking establishes the foundations of game manipulation. Learn how to set up a laboratory environment on rooted devices, perform real-time memory manipulation with GameGuardian, and understand the impact of Unity’s JIT/AOT architecture and IL2CPP on modern mobile game security.