↳ http://sec.eddyproject.com/6000-hackerone-disclosed-reports/
In order to achieve an “endless” reading list, I used the HackerOne API to collect every single disclosed report on HackerOne within the last 5 years. Multiple people asked for the list – so here it is! Over 6,000 reports included….
Intercepting HTTPS traffic is a necessity with any mobile security assessment. By adding a custom CA to Android, this can easily be done. As of Android Nougat, however, apps don’t trust client certificates anymore unless the app explicitly enables this….
This article brings forth a way to integrate the defense in depth concept to the client-side of web applications….
↳ https://simpletotech.blogspot.com/2019/03/how-someone-can-hack-your-whats.html
The Hack today i am going to illustrate is one of the most basic ways that will make us think to whom we give our smartphone to and what impacts it can have on us….
↳ https://trustfoundry.net/cross-site-request-forgery-cheat-sheet/
The Cross-Site Request Forgery (CSRF) Cheat Sheet is a flowchart that is designed to cover the common scenarios that an experienced application penetration tester would test for in CSRF testing….
