The vulnit labs.

Vulnerability research, exploitation techniques and engineering notes from our work on mobile application security.

From a connected doorbell to Home Assistant: reverse-engineering a Netatmo/BTicino intercom with an AI agent and a virtual phone

Research · October 14, 2026 · Javier Tallón

Escaping Authy: recovering 46 TOTP secrets from a walled-garden authenticator

Research · October 13, 2026 · Javier Tallón

Fuzzing for Mobile App Security: An Engineering Overview

Research · April 13, 2026 · Jacobo Casado