Android Expert·4d agoHarbor Under Audit: Securing an Android App When an Agent Holds the PenHow agent skills, Play Integrity and privacy-first APIs close the gaps AI coding agents miss, with Kotlin code and real failure modes.A response icon1A response icon1
Anil Kumar·5d agoAndroid Security Checklist: Keystore, Biometrics, and Play Integrity in KotlinA practical guide to protecting Android applications using Android Keystore, BiometricPrompt, Credential Manager, AES-GCM encryption…
abdelnasser·6d agoOne Deep Link, Zero Validation, Full ATO (Again)بِسْمِ اَللَّهِ وَالْحَمْدِ لِلَّهِ الَّذِي عَلَّمَ بِالْقَلَمِ عَلَّمَ الْإِنْسَانَ مَا لَمْ يَعْلَمْ وَالصَّلَاةَ وَالسَّلَامَ عَلَى…
abdelnasser·Nov 3Intent Redirection to One-Click Account Takeover (But It’s a Duplicate)بِسْمِ اَللَّهِ وَالْحَمْدِ لِلَّهِ الَّذِي عَلَّمَ بِالْقَلَمِ عَلَّمَ الْإِنْسَانَ مَا لَمْ يَعْلَمْ وَالصَّلَاةَ وَالسَّلَامَ عَلَى…
abdelnasser·Nov 3One-Click Cookie Theft via Deep Link XSS (But Deep Links Are Out of Scope)بِسْمِ اَللَّهِ وَالْحَمْدِ لِلَّهِ الَّذِي عَلَّمَ بِالْقَلَمِ عَلَّمَ الْإِنْسَانَ مَا لَمْ يَعْلَمْ وَالصَّلَاةَ وَالسَّلَامَ عَلَى…
abdelnasser·Nov 3Stealing App Internal Files via Intent Redirection to Insecure WebViewبِسْمِ اَللَّهِ وَالْحَمْدِ لِلَّهِ الَّذِي عَلَّمَ بِالْقَلَمِ عَلَّمَ الْإِنْسَانَ مَا لَمْ يَعْلَمْ وَالصَّلَاةَ وَالسَّلَامَ عَلَى…
abdelnasser·Nov 3One-Click Account Takeover via WebView Auth Header Injection to Claimable Whitelisted Domainبِسْمِ اَللَّهِ وَالْحَمْدِ لِلَّهِ الَّذِي عَلَّمَ بِالْقَلَمِ عَلَّمَ الْإِنْسَانَ مَا لَمْ يَعْلَمْ وَالصَّلَاةَ وَالسَّلَامَ عَلَى…
InThe RepobyAditya Pranoto·Nov 2Analyzing Android Malware Disguised As a Digital Wedding InvitationIt all starts with a polite message. A familiar name, a courteous greeting, and a seemingly harmless attachment: Buka_Undangan_Resmi.pdf…
joho no todai·Nov 1Android Zero-Click SMS Flaw Disconnects Calls: Proof of Concept Published, Fixes Only for Android…Technical details and proof-of-concept code have been published for a vulnerability that can disable Android’s cellular functionality with…
