// tagged · 13 posts

#android

2022-04-06 mobile 13 min research

InsecureShop — Android App Exploitation, pt. 1

Part 1: InsecureShop walkthrough covering insecure logging, hardcoded credentials, insecure data storage, SSL bypass, and URL validation issues.

2022-04-06 mobile 11 min research

Part 2: insecure broadcast receivers, implicit intent hijacking, intent redirection to protected components, and WebView file exfiltration.

2022-04-06 mobile 2 min research

Part 3: arbitrary code execution via third-party package context loading; vulnerabilities 16-18 listed as stubs.