What Nobody Tells You About Testing Cross-Platform Apps

Beyond android:exported: Secure Android IPC with signature permissions, caller validation, and Confused Deputy attack prevention

Android Mobile Application Security Testing Write-Up

Android Mobile Application Security Testing Write-Up

Android Mobile Application Security Testing Write-Up

Android Mobile Application Security Testing Write-Up

Here, I learned how to find a deep link vulnerability in AllSafe, which is . AllSafe (an intentionally vulnerable Android app)
This app is…

How I reverse-engineered the Fused Location Provider, drowned real GPS in fake signals, and reflected into hidden APIs to make every app on…

Security shouldn’t be an afterthought. Here is how to lock down your modern Android applications using Kotlin.

If you’ve ever been curious about how apps like WhatsApp, Instagram, Uber, Spotify, or Amazon communicate with their backend servers…

Part 4 of our Android security series. Part 3 covered Certificate Pinning — this post covers a much quieter leak: your own log statements.

Part 3 of our Android security series. Part 2 covered Network Security Config — pinning builds directly on top of it.

Part 5 of our Android security series. Part 4 covered Secure Logging — this post covers the other half of CRYPTO: where your encryption…