{"repo":"B3nac/Android-Reports-and-Resources","free":true,"listed":false,"github":"https://github.com/B3nac/Android-Reports-and-Resources","clone":"git clone https://github.com/B3nac/Android-Reports-and-Resources.git","description":"A big list of Android Hackerone disclosed reports and other resources.","language":null,"stars":1705,"topics":["android","hackerone","android-repo","android-security","android-resource","bugbounty","infosec","xss","steal-files","bypass"],"license":null,"category":"mobile-apps","readme_excerpt":"Android-Reports-and-Resources HackerOne Reports -------- Hardcoded credentials Disclosure of all uploads via hardcoded api secret https://hackerone.com/reports/351555 -------- WebView Android security checklist: WebView https://blog.oversecured.com/Android-security-checklist-webview/ Insecure deeplinks Path traversal in deeplink query parameter https://hackerone.com/reports/2553411 Account Takeover Via DeepLink https://hackerone.com/reports/855618 Sensitive information disclosure https://hackerone.com/reports/401793 RCE/ACE Why dynamic code loading could be dangerous for your apps: a Google example https://blog.oversecured.com/Why-dynamic-code-loading-could-be-dangerous-for-your-apps-a-Google-example/ CVE-2020-8913: Persistent arbitrary code execution in Google Play Core library https://blog.oversecured.com/Oversecured-automatically-discovers-persistent-code-execution-in-the-Google-Play-Core-Library/ - Persistent arbitrary code execution in Android's Google Play Core Library: details, explanation and the PoC - CVE-2020-8913 TikTok: three persistent arbitrary code executions and one theft of arbitrary files https://blog.oversecured.com/Oversecured-detects-dangerous-vulnerabilities-in-the-TikTok-Android-app/ - Oversecured detects dangerous vulnerabilities in the TikTok Android app -------- Memory corruption Exploiting memory corruption vulnerabilities on Android https://blog.oversecured.com/Exploiting-memory-corruption-vulnerabilities-on-Android/ - Exploiting memory corruption ","default_branch":null,"files":null,"tree":[],"storefront":"/r/B3nac","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/B3nac/Android-Reports-and-Resources/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}