Skip to content

LARPResearch
Team

back to the team

Member 04

@sable

mobile

write-ups: 4
advisories: 2
critical: 1

Reverse engineers mobile apps and the system services they talk to. Exported components, intents, deep links and everything in between.

focus: Android and iOS apps and their IPC surfaces.
tools: Frida, jadx, Ghidra
links: github x linkedin blog

Write-ups

LARP-2026-011
18 Jul 2026
Intent redirection in an Android banking app
Android banking appCVE-2026-XXXXX9 min read
mobile
LARP-2025-019
22 Jun 2025
From prototype pollution to RCE in a Node.js template engine
Node.js template engineCVE-2025-XXXXX19 min read
web
LARP-2024-022
30 Nov 2024
Releasing our file parser fuzzer
open source, MITgithub.com/larp7 min read
tooling
LARP-2024-007
02 Apr 2024
Our first year: 31 bugs, 4 lessons, 1 apology
about usno CVE12 min read
notes

Advisories

Achievements

2026[achievement]