NegativeWibes

Static Code Analysis: Static code analysis ,  is a  method of computer program debugging that is done by examining the  code  without executing the program. The process provides an understanding of the  code  structure, and  can  help to ensure that the  code  adheres to industry standards . In Android Application static code Analysis:   Manually or by tool analyzing or examining the whole code and    finding any sensitive data hardcoded in source code or not. Or any vulnerable library used or not  not sufficient . Main Role of static  code analysis :  Understand flow of code. All automated tool like mobsf , quark  do static code analysis but for my point of view manually analysis of static code is best case. For doing all things manually we have some knowledge of java and android application code structure. In static Analysis of App code sometimes ago I simply decompile application and open the a...

When we play with JavaScript, seriously we don’t need any tool only we have to understand the flow of JavaScript.  By Using JavaScript I bypassed the login in an application. I am always excited to bypass things like login bypass, Otp Bypass etc. while I testing an application. I always check View-source of application mainly on login page and registration page 1.    Open application login page.  There are two ways of login in the application. One way by username and password and another one is mobile no and otp. I choose second one 2.       Let’s view source  of application login page : ON seeing this code I noticed that    if otp is wrong then above function throw an error  otherwise loginwithmobile(mob No) function is called .