Client-Side SSRF to Credential Theft via Exported Android Activity
How reading one exported Activity by hand, following an unvalidated URL field, and misreading the impact twice led to a one-tap session t...
Category
Android Security
2 posts in this category
Can Android Be XSSed? Account Takeover Through JavaScript Bridge
A clean reflected XSS on an auth-less subdomain that topped out at alert(1), and the investigation that turned it into a critical account...