Hacking Android Deeplink Issues | Insecure URL Validation | Android Pentesting

Deeplink and Insecure URL Validation
Resources :
Webview Resources : book.hacktricks.xyz/mobile-ap...
Hacking Webviews : github.com/authenticationfail...
Download APK : github.com/optiv/InsecureShop...
InsecureShop : github.com/optiv/InsecureShop
FB PoC : gist.github.com/LuD1161/1c867...
Exploit PoC : gist.github.com/LuD1161/a1fc9...
Report : ash-king.co.uk/facebook-bug-b...
Command : adb shell am start -W -a android.intent.action.VIEW -d "insecureshop://com.insecureshop/web?url=aseemshrey.in"
Pic : / 0*etdx
▬▬▬▬▬▬ 🔗 Other Links ▬▬▬▬▬▬
💸 $100 Digital Ocean referral link :💸
m.do.co/c/5e8e8b6c9c39
Google FeedBack Form : forms.gle/rA9oy5wqN5GSLkh8A
Discord : / discord
Subreddit : / hackingsimplified
Telegram : t.me/hackingsimplified42
Hope it was worth your time.
Stay tuned.
Thank you everyone :)
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
Disclaimer :
These materials are for educational and research purposes only.
Do not attempt to violate the law with anything contained here. If this is your intention, then LEAVE NOW! The creator of this video, nor anyone else affiliated in any way, is going to accept responsibility for your actions.
------------------------------------------------------------------------------------------------------------------------
#Deeplink #HackingSimplified #AndroidHacking #beTheHACR #websecurity #howtohack #hack #howtobeahacker #hackingCourse #bugBounty #bug #bounty #hacker #freeHacking #freecourse
hacking ,HackingSimplified, Hacking Simplified, Start Hacking ,Be The HACR, web security, how to be a hacker, free hacking, free hacking course, web security,hacking Course,bug Bounty,hacker,bug bounty,cyber security,bug bounty hunting, hacking

[@HackingSimplifiedAS]

If you like the video. Make sure to share the video :D

[@usamazahoor3148]

Your concepts are clear that's why you teach in such a magnificent way...more power to you

[@benedictcharles]

Amazing content, the process and way its explained and the editing. Looking forward to move videos.

[@ankittathe866]

Everything you demonstrated here worth great value contents brother ! Keep going with this android series ! Best wishes !

[@arijitgaming7317]

thanks sir deeplink ka upar video lane ka liya ma is ka liya bhot din se wait kara raha tha🙏🙏

[@yrks1109]

Amazing explanation man! keep it up! 🔥

[@saivenkatmaheshwaram9868]

bro next episodes try to complete owsap top 10 for android if u have time ...

[@URKCS-kx3sf]

Bro I didn't get any uri.getpath in webviewactivity why ?

[@goodboy8833]

Wonderful well explained. You plz continue this series

[@HarshalChauhan_]

Thanks man for this great video

[@blackninja2.027]

Could you please do the SSL pinning bypassing video with Frida. Please continue that series.

[@aat2312]

I found same issue on zomato app..that u demonstrated at

[@itsm3dud39]

can you explain how an attacker can exploit this vulnerability? like you opened the url from your device. so how this going to attack a victim user?

[@utkarshagrawal6060]

Bro you wont believe, I liked your post and today I started to looking out in my feeds, as I wished about your content is expected as I wished, Great., aseem just one query: for exploiting deeplink we will have to check what activity it resolves to and then we have to check what activity is doing with the deeplink. So if we found any query parameters just like you, we can exploit it accordingly. Is it true?

[@saurabhkumar760]

Waiting for ssl pinning part😊

[@saikiranlingadally1036]

🔥

[@trustedsecurity6039]

Please activate english subtile. Thanks for the awesome content like always

[@medoll7118]

Nice 👍

[@Vishal-ng2xb]

But how to fix this? what checks to put?

[@thejulfikar]

I just solved the lab only! Real apps are different! :/ What we can do now?