In this blog, we will dive into an interesting method for intercepting traffic from applications implementing SSL Pinning and applications that do not respect system proxies. Xamarin, for instance, relies on the Mono runtime, which introduces its network stack instead […]
Write-up
In this blog, we will learn about the possible ways to find cross-site scripting by abusing JavaScript in Android applications. Cross-site scripting (XSS) in an Android application occurs when an attacker successfully injects malicious scripts (usually JavaScript) into the application’s […]
As part of the Application Security Assessment, we have come across the vulnerability Server Side Request Forgery (SSRF) using HTML Injection, via PDF and image generator. As the vulnerability name suggests, an adversary forces a vulnerable web server to access […]
As an impact of digitization and IoT, service providers have access to immense consumer data. I believe data privacy and protection law requires proper enforcement. Today, when we access an app, we share virtually every personal information and service, providing […]
Note: This bug has been reported via Paypal bug bounty program and is fixed now. POC FIRST? There are days when we get to test different applications with third party integrations such as payment gateways, logging etc etc. Same way […]
All cross site scripting vulnerabilities cannot be exploited easily and would need a vulnerablity chain to exploit them For example a self XSS that only executes in your profile, here is how whitton used minor OAuth flaws to exploit a […]
What Is Fabric.io? The Fabric platform is made of three modular kits that address some of the most common and pervasive challenges that all app developers face: stability, distribution, revenue and identity. It combines the services of Crashlytics, MoPub, Twitter […]
WE ARE CERTIFIED
TRUST WE GAINED
