NegativeWibes

Static Code Analysis: Static code analysis ,  is a  method of computer program debugging that is done by examining the  code  without executing the program. The process provides an understanding of the  code  structure, and  can  help to ensure that the  code  adheres to industry standards . In Android Application static code Analysis:   Manually or by tool analyzing or examining the whole code and    finding any sensitive data hardcoded in source code or not. Or any vulnerable library used or not  not sufficient . Main Role of static  code analysis :  Understand flow of code. All automated tool like mobsf , quark  do static code analysis but for my point of view manually analysis of static code is best case. For doing all things manually we have some knowledge of java and android application code structure. In static Analysis of App code sometimes ago I simply decompile application and open the a...

Hey Guys  today we explore Web view in  android application and   how their misconfiguration leads to Cross site scripting , open redirection , html injection in application. WHAT IS Web View? Android Web View is used to display web page in android. The web page can be loaded from same application or URL. It is used to display online content in android activity. Android Web View uses webkit engine to display web page.The android.webkit.WebView is the subclass of Absolute Layout class.  Web Views are used in android applications to load content and HTML pages within the application.      For example: Improper Implementation of Web view   1. Loading Clear Text content  If a Web View load url that is on http(Clear text communication)  then it would be open to various forms of attack such as MiTM.                               ...

DESCRIPTION : AS you know already that what is passcode protection and why it is applied ? And how it is bypassed normally ? If you don’t know please read my previous blog:   https://negativewives.blogspot.com/2020/04/passcode-protection-bypass-by-brute.html                                                                                When any passcode protection is implemented first check any activity is exported or not ? Here we  only talking the scenario where no activity is exported in application   PROCEDURE : Open Application after implementing passcode protection. You see that passcode activity is launched first Go to AndroidMainfest.xml file and check launch mode of passcode activity . Question Arises in your mind   - ...

In android You know that every GUI interface is an  separate activity. An activity represents a single screen with a user interface just like window or frame of Java. In An application there are many activities depend on application functionalities. Let's take a example : An application that have   three modules login , register and   dashboard . For that there are there are three different activities for all these modules. What is export Means Here? In Android Application there is an attribute android: exported =true or false . This attribute is used in android   to provide an access to   other third party application to start their service , activities   and receive broadcast   messages. Like for an Example : If an application    have broadcast receiver to receive any events or message , if in that application exported attribute is set to true then this    broadcast message   can also receive by other thi...

                      The StrandHogg vulnerability (Task Hijacking) Promon security researchers have found proof of a dangerous Android vulnerability, dubbed ‘StrandHogg’, that allows real-life malware to pose as legitimate apps, with users unaware they are being targeted. First of all we started with basic knowledge of Activities  and task in android . You know very well  ANDROID SYSTEM IS MULTITASKING SYSTE M                                                       WHAT IS TASK IN Android? Task is collection of actiivites in android . like for example: you opened a gmail application . inbox activity is opened , now you click on message , a new activity is opened . now, there are two activities but , collection of these activities  is called task.  Activiti...

why the previous version devices are working?  Previous versions devices like : Kitkat,Lolipop allow  Android  to trusts user or admin supplied CA certificates. Means In Old versions Android  trust both user or root certificate. So, In Older Devices You have to only  install   burp certificate , and you can capture android application traffic , but In Newer version it is not possible. For Capturing traffic on newer version device  , requirements are given below: 1 . device must be rooted. You can us magisk or any other method to root the device. but for my point of view  magisk is best one.   https://www.thecustomdroid.com/install-magisk-root-android-devices/ You know very well that Newer Version device only trust root certificate not trust user certificate. so we have to put our certificate in root certificate . 1. install the certificate. (defaultly certficate  as user certificate )  path: /data/misc/us...

Hello Guys , today I'm gonna teach you  pass code /pin protection bypass in android application. that is applied in android application to authenticate in application. 1 . WHAT IS PIN PROTECTION AND WHY IS APPLIED ? _____________________________________________________________________ ____________ Pin protection is 4 digit pin  that  implemented on android application start/resume activity  (on every start/resume activity  first pin activity started after supplying right pin user is authenticated).Pin Protection is applied to secure the account from unauthorized use. For Example: S omeone finds your lost phone, or lost your phone and if phone is unlocked. then without pin protection that person access your any application and can do whatever he want.so  pin protection  a new layer of security in which application ask  4 digit pin to authenticate  user. WHERE PIN PROTECTION IS APPLIED? _______________...