abdelnasser·14h agoOne Deep Link, Zero Validation, Full ATO (Again)بِسْمِ اَللَّهِ وَالْحَمْدِ لِلَّهِ الَّذِي عَلَّمَ بِالْقَلَمِ عَلَّمَ الْإِنْسَانَ مَا لَمْ يَعْلَمْ وَالصَّلَاةَ وَالسَّلَامَ عَلَى…
abdelnasser·1d agoIntent Redirection to One-Click Account Takeover (But It’s a Duplicate)بِسْمِ اَللَّهِ وَالْحَمْدِ لِلَّهِ الَّذِي عَلَّمَ بِالْقَلَمِ عَلَّمَ الْإِنْسَانَ مَا لَمْ يَعْلَمْ وَالصَّلَاةَ وَالسَّلَامَ عَلَى…
abdelnasser·1d agoOne-Click Cookie Theft via Deep Link XSS (But Deep Links Are Out of Scope)بِسْمِ اَللَّهِ وَالْحَمْدِ لِلَّهِ الَّذِي عَلَّمَ بِالْقَلَمِ عَلَّمَ الْإِنْسَانَ مَا لَمْ يَعْلَمْ وَالصَّلَاةَ وَالسَّلَامَ عَلَى…
abdelnasser·1d agoStealing App Internal Files via Intent Redirection to Insecure WebViewبِسْمِ اَللَّهِ وَالْحَمْدِ لِلَّهِ الَّذِي عَلَّمَ بِالْقَلَمِ عَلَّمَ الْإِنْسَانَ مَا لَمْ يَعْلَمْ وَالصَّلَاةَ وَالسَّلَامَ عَلَى…
abdelnasser·1d agoOne-Click Account Takeover via WebView Auth Header Injection to Claimable Whitelisted Domainبِسْمِ اَللَّهِ وَالْحَمْدِ لِلَّهِ الَّذِي عَلَّمَ بِالْقَلَمِ عَلَّمَ الْإِنْسَانَ مَا لَمْ يَعْلَمْ وَالصَّلَاةَ وَالسَّلَامَ عَلَى…
InThe RepobyAditya Pranoto·3d agoAnalyzing Android Malware Disguised As a Digital Wedding InvitationIt all starts with a polite message. A familiar name, a courteous greeting, and a seemingly harmless attachment: Buka_Undangan_Resmi.pdf…
joho no todai·4d agoAndroid Zero-Click SMS Flaw Disconnects Calls: Proof of Concept Published, Fixes Only for Android…Technical details and proof-of-concept code have been published for a vulnerability that can disable Android’s cellular functionality with…
InOSINT TeambyHangga Aji Sayekti·6d agoYour Android SDK API Key Is Not a Secret: Rethinking Client AuthenticationHow threat modeling reveals the limits of API keys in mobile SDKs — and how to design a safer authentication architecture.
Protagonist | Offensive Security·Oct 28Learn Android Hacking the Right Way: APK Structure Explained for Beginners — Inside Telegram’s APK…(A quick note before we sail: I used AI as a writing partner to help structure and polish this chapter. The research, commands and outputs…
