offsecnotes
  • offsecnotes
  • I - Android
    • Vulnerabilities
      • Bypass Binary Protections
      • Security Misconfiguration
      • Insecure Data Storage
      • Intent Attack Surface
      • Deep link
      • Task Hijacking
      • Tapjacking
      • Exploiting exported Activities
    • Reverse Engineering
      • APK Building
      • Reversing
      • Analyze native libraries
    • Frida
      • Installation & Commands
      • frida-trace
      • Working with java code
      • Working with native code
    • Network Interception
    • ADB
    • Framework
  • II - Web Application
    • Vulnerabilities
      • API
      • Authentication
      • BAC
      • Business logic vulnerabilities
      • Clickjacking
      • CORS
      • CSRF
      • File upload
      • GraphQL API
      • Host header injection
      • HTTP request smuggling
      • Information disclosure
      • Insecure deserialization
      • JWT
      • NoSQL injection
      • OAuth 2.0
      • OS command injection
      • Path traversal
      • Race conditions
      • Prototype pollution
      • SQL injection
      • SSRF
      • SSTI
      • Web cache deception
      • Web cache poisoning
      • Web LLM
      • WebSockets
      • XXE
      • XSS
    • Web security
      • General Obfuscation
      • Javascript & Obfuscation
      • Methods & Headers
      • Web cache
      • OAuth
      • SOP, CORS, Pre-flight
    • Automation
  • III - Network
    • Information Gathering
    • Network Services Exploitation
    • Post-Exploitation & Commands
    • Privilege Escalation
  • IV - Miscellaneous
    • Password Cracking
    • Burp Suite
    • AV Evasion
    • CTF Methodology
  • References
Powered by GitBook
On this page
  1. I - Android

Vulnerabilities

Last updated 1 month ago

Bypass Binary Protections
Security Misconfiguration
Insecure Data Storage
Intent Attack Surface
Deep link
Task Hijacking
Tapjacking
Exploiting exported Activities