⤷ Title: Exploiting Insecure Android WebView with JavaScript Interface
════════════════════════
𐀪 Author: Youssefhussein
════════════════════════
ⴵ Time: Thu, 04 Sep 2025 21:19:03 GMT
════════════════════════
⌗ Tags: #mobile_pentesting #cybersecurity #penetration_testing #android_webview #pentesting
════════════════════════
𐀪 Author: Youssefhussein
════════════════════════
ⴵ Time: Thu, 04 Sep 2025 21:19:03 GMT
════════════════════════
⌗ Tags: #mobile_pentesting #cybersecurity #penetration_testing #android_webview #pentesting
Medium
Exploiting Insecure Android WebView with JavaScript Interface
Android applications often make use of WebView to embed web content directly inside the app. While convenient for developers, misconfigured…
⤷ Title: Account Takeover via OAuth Code Hijacking on BuzzFeed’s Tasty App: Chaining WebView , Deeplinks
════════════════════════
𐀪 Author: Farouk Nabil
════════════════════════
ⴵ Time: Mon, 11 May 2026 14:32:48 GMT
════════════════════════
⌗ Tags: #oauth2 #account_takeover #bug_bounty #android_webview #android_pentesting
════════════════════════
𐀪 Author: Farouk Nabil
════════════════════════
ⴵ Time: Mon, 11 May 2026 14:32:48 GMT
════════════════════════
⌗ Tags: #oauth2 #account_takeover #bug_bounty #android_webview #android_pentesting
Medium
Account Takeover via OAuth Code Hijacking on BuzzFeed’s Tasty App: Chaining WebView , Deeplinks
Account Takeover via OAuth Code Hijacking on BuzzFeed’s Tasty App: Chaining WebView Exploits, Cross-Platform Deeplinks, and Implicit Broadcasts How a rejected URL validation bypass pushed me to …