HermesAngler: Enabling Dynamic Instrumentation of iOS React Native Apps

AutorRenze, Martin; Scherf, Fabian William
Datum2026
ArtConference Paper
AbstraktWe present HermesAngler, a Frida-based dynamic instrumentation tool that enables function hooking inside the Hermes bytecode context of iOS React Native apps. We additionally present static analysis results concerning hardcoded secrets in a sample of 190 real-world React Native apps, which motivates the need for dynamic instrumentation at the Hermes bytecode level. We demonstrate HermesAngler on selected real-world apps, confirming statically identified weaknesses as proof-of-concept, such as the use of hardcoded AES keys at runtime.
KonferenzInternational Workshop on Reliable and trustworthy Automated Software Engineering 2026
Urlhttps://publica.fraunhofer.de/handle/publica/526144

Cyber­security-Konferenzen

zur Übersicht

Schwachstellen und Sicherheitslücken

ATHENE CVE-Einträge

Aus- und Weiterbildung

Informieren Sie sich über die Aus- und Weiter­bildungs­angebote der in ATHENE mitwirkenden Institutionen

Mehr INFO