https://flawseekr.com/blog/a-3500-usd-html-injection-escalating-a-low-bug-with-a-csrf-like/ 2025-12-22T00:00:00+07:00 https://flawseekr.com/blog/can-android-be-xssed-account-takeover-through-javascript-bridge/ 2025-12-28T00:00:00+07:00 https://flawseekr.com/blog/client-side-ssrf-to-credential-theft-via-exported-android-activity/ 2026-07-13T00:00:00+07:00 https://flawseekr.com/about/ https://flawseekr.com/blog/ https://flawseekr.com/contact/ https://flawseekr.com/ https://flawseekr.com/search/ https://flawseekr.com/@xchopath/ https://flawseekr.com/category/web-security/ https://flawseekr.com/category/android-security/ https://flawseekr.com/tag/html-injection/ https://flawseekr.com/tag/csrf/ https://flawseekr.com/tag/bug-bounty/ https://flawseekr.com/tag/xss/ https://flawseekr.com/tag/android/ https://flawseekr.com/tag/webview/ https://flawseekr.com/tag/javascript-bridge/ https://flawseekr.com/tag/ssrf/ https://flawseekr.com/tag/intent-injection/ https://flawseekr.com/gpoc.html 2026-09-06T12:08:46+07:00 https://flawseekr.com/jsbridge.html 2026-09-06T12:08:46+07:00 https://flawseekr.com/mex-get-location.html 2026-09-06T12:08:46+07:00 https://flawseekr.com/poc-camera.html 2026-09-06T12:08:46+07:00 https://flawseekr.com/poc-exfil-storage.html 2026-09-06T12:08:46+07:00 https://flawseekr.com/poc-iframe.html 2026-09-06T12:08:46+07:00 https://flawseekr.com/poc-location.html 2026-09-06T12:08:46+07:00 https://flawseekr.com/poc-mapp.html 2026-09-06T12:08:46+07:00 https://flawseekr.com/poc-mex-v2.html 2026-09-06T12:08:46+07:00 https://flawseekr.com/poc-network.html 2026-09-06T12:08:46+07:00 https://flawseekr.com/poc-storage.html 2026-09-06T12:08:46+07:00 https://flawseekr.com/poc.html 2026-09-06T12:08:46+07:00 https://flawseekr.com/window-props.html 2026-09-06T12:08:46+07:00