NegativeWibes

                      The StrandHogg vulnerability (Task Hijacking) Promon security researchers have found proof of a dangerous Android vulnerability, dubbed ‘StrandHogg’, that allows real-life malware to pose as legitimate apps, with users unaware they are being targeted. First of all we started with basic knowledge of Activities  and task in android . You know very well  ANDROID SYSTEM IS MULTITASKING SYSTE M                                                       WHAT IS TASK IN Android? Task is collection of actiivites in android . like for example: you opened a gmail application . inbox activity is opened , now you click on message , a new activity is opened . now, there are two activities but , collection of these activities  is called task.  Activiti...

why the previous version devices are working?  Previous versions devices like : Kitkat,Lolipop allow  Android  to trusts user or admin supplied CA certificates. Means In Old versions Android  trust both user or root certificate. So, In Older Devices You have to only  install   burp certificate , and you can capture android application traffic , but In Newer version it is not possible. For Capturing traffic on newer version device  , requirements are given below: 1 . device must be rooted. You can us magisk or any other method to root the device. but for my point of view  magisk is best one.   https://www.thecustomdroid.com/install-magisk-root-android-devices/ You know very well that Newer Version device only trust root certificate not trust user certificate. so we have to put our certificate in root certificate . 1. install the certificate. (defaultly certficate  as user certificate )  path: /data/misc/us...

Short Description about CORS An HTML5 cross-origin resource sharing (CORS) policy controls whether and how content running on other domains can perform two-way interaction with the domain that publishes the policy. The policy is fine-grained and can apply access controls per-request based on the URL and other features of the request. Trusting arbitrary origins effectively disables the same-origin policy, allowing two-way interaction by third-party web sites. Unless the response consists only of unprotected public content, this policy is likely to present a security risk. If the site specifies the header Access-Control-Allow-Credentials: true, third-party sites may be able to carry out privileged actions and retrieve sensitive information. Even if it does not, attackers may be able to bypass any IP-based access controls by proxying through users' browsers. How to Verify CORS Misconfiguration (If any application using the API their Possibilities of CORS Exist) Case...

Hello Guys , today I'm gonna teach you  pass code /pin protection bypass in android application. that is applied in android application to authenticate in application. 1 . WHAT IS PIN PROTECTION AND WHY IS APPLIED ? _____________________________________________________________________ ____________ Pin protection is 4 digit pin  that  implemented on android application start/resume activity  (on every start/resume activity  first pin activity started after supplying right pin user is authenticated).Pin Protection is applied to secure the account from unauthorized use. For Example: S omeone finds your lost phone, or lost your phone and if phone is unlocked. then without pin protection that person access your any application and can do whatever he want.so  pin protection  a new layer of security in which application ask  4 digit pin to authenticate  user. WHERE PIN PROTECTION IS APPLIED? _______________...

 improper cache managment to cross site request forger y 1.you have to  check  all visited pages saved in browser cache or not  2 you have to check  csrf  token is applied for  user by user . that should not be expired.  LETS  START  login your account EXAMPLE(abc)  visit all pages  logout the account  now click back buttton u see all visited pages  open profile page   on intercept and click on save  capture this request   we get a csrf token of that user ----------------------------------------------- create new account login that account and go to profile and  capture the  request of update profile and make a csrf form of that request.  now paste csrf token  that we previously taken and save as.html   if abc login accounnt and that html page is send and when he opened that page their profile  get changed -------...

                   HTTP REQUEST AND RESPONSE Http request and response contains some headers . that may be security headers, informational headers etc. for see request and response u have to use  intercepter tool best tool is burp-suite  here  is link of burp-suite pro . you can download and use                                  click here to download                                  HTTP REQUEST::::::                                          open your browser and got to any website and intercept the request ....... request contians followinf information like   given below----- The first line of ev...

hey guys ,, if you  forgotten passowrd or username or both .. dontworry you can reset password  of nessus or add or remove user 1. open terminal and go to sbin directory                          cd /opt/nessus/sbin  2.enter ls command to see all files 3.there  are a file nessuscli by which we can reset password,add user and remove user 4. execute that file ---  ./nessuscli 5.it showing many options like  user-commands,fetch commands,bug reporting commnads.  6.enter  command  ./nessuscli lsuser  it will show username 7.  TO change  password  enter command  ./nessuscli chpasswd <username> 8. enter new password and enjoy If you want to  adduser ,it also easy like reset password   ...Goto same directory and enter command      ./nessuscli adduser       enter any use...