NegativeWibes

                      The StrandHogg vulnerability (Task Hijacking) Promon security researchers have found proof of a dangerous Android vulnerability, dubbed ‘StrandHogg’, that allows real-life malware to pose as legitimate apps, with users unaware they are being targeted. First of all we started with basic knowledge of Activities  and task in android . You know very well  ANDROID SYSTEM IS MULTITASKING SYSTE M                                                       WHAT IS TASK IN Android? Task is collection of actiivites in android . like for example: you opened a gmail application . inbox activity is opened , now you click on message , a new activity is opened . now, there are two activities but , collection of these activities  is called task.  Activiti...

why the previous version devices are working?  Previous versions devices like : Kitkat,Lolipop allow  Android  to trusts user or admin supplied CA certificates. Means In Old versions Android  trust both user or root certificate. So, In Older Devices You have to only  install   burp certificate , and you can capture android application traffic , but In Newer version it is not possible. For Capturing traffic on newer version device  , requirements are given below: 1 . device must be rooted. You can us magisk or any other method to root the device. but for my point of view  magisk is best one.   https://www.thecustomdroid.com/install-magisk-root-android-devices/ You know very well that Newer Version device only trust root certificate not trust user certificate. so we have to put our certificate in root certificate . 1. install the certificate. (defaultly certficate  as user certificate )  path: /data/misc/us...