WhatsApp’s Task Hijacking Bug Explained

While reviewing the WhatsApp Android application, researchers identified a misconfiguration in AndroidManifest.xml related to task control features. This misconfiguration leads to a critical vulnerability called task hijacking and enables the attack flow against the latest WhatsApp on Android-based phones. In successful exploitation of the vulnerability, the malicious app can take over the “back stack” of …

Awesome Android Security

A curated list of Android Security materials and resources For Pentesters and Bug Hunters. Blog AAPG – Android application penetration testing guide TikTok: three persistent arbitrary code executions and one theft of arbitrary files Persistent arbitrary code execution in Android’s Google Play Core Library: details, explanation and the PoC – CVE-2020-8913 Android: Access to app …

Androl4b – Android Security Virtual Machine

AndroL4b is an android security virtual machine in view of ubuntu-mate incorporates the gathering of most recent framework, tutorials and labs from various security nerds and researchers for reverse engineering and malware analysis. Changes in Androl4b v.3? Tools are updated New tools and lab added Upgraded to Ubuntu mate 17.04 Some cleanup Also Read Onion nmap …