Can Android Be XSSed? Account Takeover via JavaScript Bridge

Account Takeover through XSS on websites is nothing new. But does the same attack vector exist on Android?

Burp Suite Certificate Setup for Android 13 and Below

In this guide, we'll walk you through the process of configuring the Burp Suite certificate for system-level trust on Android 13 and earlier.

Frida Quick Setup (Android)

A quick guide to setting up the Frida client on a Linux host and the Frida server on an Android device, so everything is ready for Mobile Pentesting.