Sayed Abdelhafiz·Oct 19, 2025Practical Android Pentesting: A Case Study on TikTok RCEFrom Universal XSS to native library hijacking: A comprehensive guide to Android exploitation using WebViews, Intent abuse, and Zip Slip.A response icon4A response icon4
Abdelhak Kharroubi·Oct 10, 2022[Hacking Bank] Broken Access Control Vulnerability in Banking application [PART II]As I mentioned in Part 1 the story of finding a Critical vulnerability in Banking mobile app , in the Part II,I will explain how I debugged…A response icon5A response icon5
Abdelhak Kharroubi·Oct 10, 2022[Hacking Banks] Broken Access Control Vulnerability in Banking application [PART I]This is the part I of the story about finding a critical Vulnerability in a banking mobile app that allows attackers to obtain full user…A response icon1A response icon1
![[Hacking Bank] Broken Access Control Vulnerability in Banking application [PART II]](https://webproxy.poorya-velaei-d67.workers.dev/https://miro.medium.com/v2/resize:fill:160:106/1*x6zbxpkimwbvQ_mhu8SxxQ.png)
![[Hacking Bank] Broken Access Control Vulnerability in Banking application [PART II]](https://webproxy.poorya-velaei-d67.workers.dev/https://miro.medium.com/v2/resize:fill:320:214/1*x6zbxpkimwbvQ_mhu8SxxQ.png)
![[Hacking Banks] Broken Access Control Vulnerability in Banking application [PART I]](https://webproxy.poorya-velaei-d67.workers.dev/https://miro.medium.com/v2/resize:fill:160:106/1*D8imBNVkbS5VZYcsGj1ZtQ.png)
![[Hacking Banks] Broken Access Control Vulnerability in Banking application [PART I]](https://webproxy.poorya-velaei-d67.workers.dev/https://miro.medium.com/v2/resize:fill:320:214/1*D8imBNVkbS5VZYcsGj1ZtQ.png)