My gym forced a social media down my throat. So I reverse-engineered its app.
Summary
A security-focused blog post documenting reverse-engineering of a gym's mobile app to extract and reproduce its QR-based access codes. It details the tools, steps, and encryption considerations involved, highlighting risks in client-side key handling and the potential for misuse. The piece serves as a practical case study on mobile app security and the responsibilities of developers and researchers.