bypassing java-side pairip checks in a modded android app by removing manifest-registered components, rebuilding, and signing again
a writeup of ara7ctf 2026 for/horseman
a writeup of astroctf 2025 rev/ghost