⤷ Title: Mobile Deep Link Exploitation: The Hidden Attack Surface Nobody Talks About
════════════════════════
𐀪 Author: Being_brutlix
════════════════════════
ⴵ Time: Fri, 03 Apr 2026 04:27:33 GMT
════════════════════════
⌗ Tags: #android_pentesting #bug_bounty_tips #exported_true #deep_link_android
════════════════════════
𐀪 Author: Being_brutlix
════════════════════════
ⴵ Time: Fri, 03 Apr 2026 04:27:33 GMT
════════════════════════
⌗ Tags: #android_pentesting #bug_bounty_tips #exported_true #deep_link_android
Medium
Mobile Deep Link Exploitation: The Hidden Attack Surface Nobody Talks About
INTRODUCTION
⤷ Title: Account Takeover via OAuth Code Hijacking on BuzzFeed’s Tasty App: Chaining WebView , Deeplinks
════════════════════════
𐀪 Author: Farouk Nabil
════════════════════════
ⴵ Time: Mon, 11 May 2026 14:32:48 GMT
════════════════════════
⌗ Tags: #oauth2 #account_takeover #bug_bounty #android_webview #android_pentesting
════════════════════════
𐀪 Author: Farouk Nabil
════════════════════════
ⴵ Time: Mon, 11 May 2026 14:32:48 GMT
════════════════════════
⌗ Tags: #oauth2 #account_takeover #bug_bounty #android_webview #android_pentesting
Medium
Account Takeover via OAuth Code Hijacking on BuzzFeed’s Tasty App: Chaining WebView , Deeplinks
Account Takeover via OAuth Code Hijacking on BuzzFeed’s Tasty App: Chaining WebView Exploits, Cross-Platform Deeplinks, and Implicit Broadcasts How a rejected URL validation bypass pushed me to …
⤷ Title: Is TheFatRat worth learning in Android Pentesting?
════════════════════════
𐀪 Author: Sazed369
════════════════════════
ⴵ Time: Sat, 16 May 2026 17:44:44 GMT
════════════════════════
⌗ Tags: #hacking #androidhacking #thefatrat #android #android_pentesting
════════════════════════
𐀪 Author: Sazed369
════════════════════════
ⴵ Time: Sat, 16 May 2026 17:44:44 GMT
════════════════════════
⌗ Tags: #hacking #androidhacking #thefatrat #android #android_pentesting
Medium
Is TheFatRat worth learning in Android Pentesting?
TheFatRat is a popular exploitation tool that is meant to simplify the creation, compilation, and obfuscation of backdoors. This tool helps…
⤷ Title: BorderDroid — 8KSEC
════════════════════════
𐀪 Author: Mohammed Ashraf
════════════════════════
ⴵ Time: Thu, 28 May 2026 19:53:29 GMT
════════════════════════
⌗ Tags: #penetration_testing #8ksec #android_pentesting #ctf_writeup #ctf
════════════════════════
𐀪 Author: Mohammed Ashraf
════════════════════════
ⴵ Time: Thu, 28 May 2026 19:53:29 GMT
════════════════════════
⌗ Tags: #penetration_testing #8ksec #android_pentesting #ctf_writeup #ctf
Medium
BorderDroid — 8KSEC
Introduction
⤷ Title: A Unique Case of One-Click Account Takeover via CSRF Chain
════════════════════════
𐀪 Author: n0body
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 22:12:21 GMT
════════════════════════
⌗ Tags: #pentesting #android_pentesting #hacking #bug_bounty #web
════════════════════════
𐀪 Author: n0body
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 22:12:21 GMT
════════════════════════
⌗ Tags: #pentesting #android_pentesting #hacking #bug_bounty #web
Medium
A Unique Case of One-Click Account Takeover
Hello everyone! Today I want to walk through an account takeover vulnerability I found recently. At its core, the issue was a CSRF…
⤷ Title: A Unique Case of One-Click Account Takeover
════════════════════════
𐀪 Author: n0body
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 22:12:21 GMT
════════════════════════
⌗ Tags: #pentesting #android_pentesting #hacking #bug_bounty #web
════════════════════════
𐀪 Author: n0body
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 22:12:21 GMT
════════════════════════
⌗ Tags: #pentesting #android_pentesting #hacking #bug_bounty #web
Medium
A Unique Case of One-Click Account Takeover
Hello everyone! Today I want to walk through an account takeover vulnerability I found recently. At its core, the issue was a CSRF…
⤷ Title: Android App Penetration Testing: From APK Decompilation to Runtime Exploitation [Tools and Labs]
════════════════════════
𐀪 Author: Khaledyassen
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 18:37:12 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #security #android_pentesting #infosec
════════════════════════
𐀪 Author: Khaledyassen
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 18:37:12 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #security #android_pentesting #infosec
Medium
Android App Penetration Testing: From APK Decompilation to Runtime Exploitation [Tools and Labs]
Hello, everyone. I hope you are well.
⤷ Title: Mobile Application Security | TryHackMe | practical challenge
════════════════════════
𐀪 Author: Jose Praveen
════════════════════════
ⴵ Time: Sun, 14 Jun 2026 19:51:00 GMT
════════════════════════
⌗ Tags: #mobile_pentesting #mobsf #android_pentesting #tryhackme #tryhackme_walkthrough
════════════════════════
𐀪 Author: Jose Praveen
════════════════════════
ⴵ Time: Sun, 14 Jun 2026 19:51:00 GMT
════════════════════════
⌗ Tags: #mobile_pentesting #mobsf #android_pentesting #tryhackme #tryhackme_walkthrough
Medium
Mobile Application Security | TryHackMe | practical challenge
Learn mobile application pentesting through static analysis, MobSF, and the OWASP Mobile Top 10.
⤷ Title: 1-Click Account Takeover via Misconfigured WebView
════════════════════════
𐀪 Author: abdelnasser
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 10:35:55 GMT
════════════════════════
⌗ Tags: #bug_bounty #android_pentesting #android_security #pentesting #webview
════════════════════════
𐀪 Author: abdelnasser
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 10:35:55 GMT
════════════════════════
⌗ Tags: #bug_bounty #android_pentesting #android_security #pentesting #webview
Medium
One Click Account Takeover via Misconfigured WebView
TL;DR: A retail Android app had a WebView exposed via deep link. JS was enabled, the url parameter accepted any scheme including…
⤷ Title: One Click Account Takeover via Misconfigured WebView
════════════════════════
𐀪 Author: abdelnasser
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 10:35:55 GMT
════════════════════════
⌗ Tags: #bug_bounty #android_pentesting #android_security #pentesting #webview
════════════════════════
𐀪 Author: abdelnasser
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 10:35:55 GMT
════════════════════════
⌗ Tags: #bug_bounty #android_pentesting #android_security #pentesting #webview
Medium
One Click Account Takeover via Misconfigured WebView
TL;DR: A retail Android app had a WebView exposed via deep link. JS was enabled, the url parameter accepted any scheme including…