Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Thu, 28 Sep 2023 02:44:35 GMT
———————————————
✏️Title: Bounty of an Insecure WebView (Part 1): XSS, but with Steroids
———————————————
📎Link: https://medium.com/p/1a41cf654048
———————————————
Tags: #android #webview #android_security #bug_bounty #android_bug_bounty

Medium

Bounty of an Insecure WebView (Part 1): XSS, but with Steroids

We all love our mobile apps, right? They make life easier, more fun, and keep us connected. But, did you know there’s a secret weapon…

26 views05:02

Daily Writeups

⤷ Title: WWDC 2025: Apple to Revamp SwiftUI for Richer App Experiences
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 08:21:54 +0000
════════════════════════
⌗ Tags: #Technology #app development #Apple #Apple Intelligence #Developers #ios #macOS #Rich Text #SwiftUI #WebView #WWDC 2025

Daily CyberSecurity

WWDC 2025: Apple to Revamp SwiftUI for Richer App Experiences

Apple plans a major SwiftUI overhaul at WWDC 2025, simplifying rich text and web content integration for developers.

11 views10:04

Daily Writeups

⤷ Title: LineageOS 23.0 Released on Android 16: New Camera App, Catapult TV Launcher, and Virtualization Support
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Oct 2025 02:19:11 +0000
════════════════════════
⌗ Tags: #Android #Android 16 #Android TV #Catapult #Custom ROM #LineageOS 23.0 #open_source #virtualization #WebView

Daily CyberSecurity

LineageOS 23.0 Released on Android 16: New Camera App, Catapult TV Launcher, and Virtualization Support

LineageOS 23.0, based on Android 16 QPR0, introduces a rewritten Camera app, the Catapult TV Launcher to remove ads, and enhanced virtualization capabilities.

19 views04:04

Daily Writeups

⤷ Title: Windows 11 Agenda View is Back, But Built on WebView 2 with Performance Overhead
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 02:55:55 +0000
════════════════════════
⌗ Tags: #Windows #Agenda View #Microsoft 365 Copilot #Microsoft Teams #Performance Overhead #WebView 2 #Windows 11 #Windows Shell Experience Host

Daily CyberSecurity

Windows 11 Agenda View is Back, But Built on WebView 2 with Performance Overhead

Windows 11's missing Agenda View returns, but its WebView 2 implementation causes high CPU usage. Microsoft accepts the trade-off for easier Copilot/Teams integration.

9 views04:04

Daily Writeups

⤷ Title: Frogblight Android Banking Trojan Targets Turkey via Fake E-Gov Smishing and WebView
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 00:32:19 +0000
════════════════════════
⌗ Tags: #Malware #Android trojan #banking malware #Coper #Frogblight #MaaS #smishing #spyware #Turkey #WebView

Daily CyberSecurity

Frogblight Android Banking Trojan Targets Turkey via Fake E-Gov Smishing and WebView

Frogblight, a new Android banking Trojan, is targeting Turkey via smishing with fake e-government apps. It uses WebView to steal credentials and is linked to the Coper MaaS family. It is being actively developed.

28 views02:04

Daily Writeups

⤷ Title: Google Patches High-Severity “WebView” Flaw in Chrome 143
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 01:44:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #browser security #CVE_2026_0628 #Gal Weizman #google chrome #software update #vulnerability management #WebView #zero_day

Daily CyberSecurity

Google Patches High-Severity “WebView” Flaw in Chrome 143

Google has announced an important security update for the Stable channel of its Chrome browser, rolling out patches to Windows, Mac, and Linux users to address a high-severity vulnerability that c…

60 views02:03

Daily Writeups

⤷ Title: Android WebView Exploitation: From Deep Link to Account Takeover
════════════════════════
𐀪 Author: BaymaxPop23
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 02:28:15 GMT
════════════════════════
⌗ Tags: #bug_bounty #penetration_testing #application_security #webview #android_security

Medium

Android WebView Exploitation: From Deep Link to Account Takeover

How a malicious deep link can exfiltrate session cookies and compromise user accounts with a single click

24 views04:04

Daily Writeups

⤷ Title: Tek Bir Link ile Uygulamayı Ele Geçirmek: Deep Link ve WebView İstismarı
════════════════════════
𐀪 Author: Mustafa AĞYAR
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 09:08:45 GMT
════════════════════════
⌗ Tags: #webview #application_security #cybersecurity #mobile_security #deeplink

Medium

Tek Bir Link ile Uygulamayı Ele Geçirmek: Deep Link ve WebView İstismarı

Mobil Dünyanın Arka Kapıları: WebView ve DeepLink Zafiyetleri

6 views11:04

Daily Writeups

⤷ Title: How I Stole a Crypto Key from an Android App: A Deep Dive into WebView JavaScript Bridge Abuse
════════════════════════
𐀪 Author: @4b6o07
════════════════════════
ⴵ Time: Fri, 01 May 2026 10:04:19 GMT
════════════════════════
⌗ Tags: #bug_bounty #ctf #mobile_security #webview_vulnerabilities #cybersecurity

Medium

How I Stole a Crypto Key from an Android App: A Deep Dive into WebView JavaScript Bridge Abuse

Lab: Mobile Hacking Lab — Exchange
Package: com.mobilehackinglab.exchange
Platform: Android API 33, arm64 (Pixel 6 AVD)

16 views11:04

Daily Writeups

⤷ Title: Disrupted: How the “Trapdoor” Ad Fraud Ring Weaponized 455 Android Apps for 659 Million Daily Fake Bids
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 25 May 2026 08:01:56 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Ad Fraud Pipeline #Android Malvertising #Anti_Analysis Evasion #C2 Domains #Cyber Security #HUMAN Satori #infosec #mobile security #Touch Event Simulation #Trapdoor Malware #WebView Exploit

Daily CyberSecurity

Disrupted: How the "Trapdoor" Ad Fraud Ring Weaponized 455 Android Apps for 659 Million Daily Fake Bids

HUMAN's Satori team disrupted Trapdoor, an Android ad fraud ring using 455 apps and hidden WebViews to fake 659 million daily ad bids.

22 views09:03

Daily Writeups

⤷ Title: 1-Click Account Takeover via Misconfigured WebView
════════════════════════
𐀪 Author: abdelnasser
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 10:35:55 GMT
════════════════════════
⌗ Tags: #bug_bounty #android_pentesting #android_security #pentesting #webview

Medium

One Click Account Takeover via Misconfigured WebView

TL;DR: A retail Android app had a WebView exposed via deep link. JS was enabled, the url parameter accepted any scheme including…

9 views12:04

Daily Writeups

⤷ Title: One Click Account Takeover via Misconfigured WebView
════════════════════════
𐀪 Author: abdelnasser
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 10:35:55 GMT
════════════════════════
⌗ Tags: #bug_bounty #android_pentesting #android_security #pentesting #webview

Medium

One Click Account Takeover via Misconfigured WebView

TL;DR: A retail Android app had a WebView exposed via deep link. JS was enabled, the url parameter accepted any scheme including…

12 views14:04

Daily Writeups

⤷ Title: From a “Hey, {name} ” Banner to Full Account Takeover | Chaining 4 Bugs Through a Rewards WebView
════════════════════════
𐀪 Author: Fares Walid (SirBugs)
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 01:34:22 GMT
════════════════════════
⌗ Tags: #account_takeover #bug_bounty #android #webview

Medium

From a “Hey, {name} 👋” Banner to Full Account Takeover | Chaining 4 Bugs Through a Rewards WebView

Hey folks 😀 Hope you are doing great today! ❤

18 views02:03

About

Blog

Apps

Platform