OAuth in Mobile Apps: How Custom Schemes can leak Your Tokens
OAuth 2.0: The Protocol OAuth 2.0 solves…
May 19, 2026
Category: Analysis
Explore Our Blog to Find
Your Unique Interests!
Browse our blog for fresh ideas that align with your interests.
Detecting and Exploiting Insecure Deserialization with Djini.AI
See how Djini.AI automatically scanned an Android app…
May 15, 2026
Intro to Intent redirections…and how to exploit them
Android Intents are the core messaging system that…
May 14, 2026
Unlimited Mobile Security Testing, Directly From Your AI Agent
Any AI agent that supports A2A can now…
May 13, 2026
1-Click ATO: A studycase of common Android apps misconfigurations.
Summary A while ago, i found a chain…
April 24, 2026
Automated API Security Testing for Mobile Backends
Your mobile apps talk to backend APIs that…
April 23, 2026
Unauthorized Device Command and Control
How an Exported Activity processed untrusted Intent extras…
March 1, 2026
Intro to Android WebViews and deep links…and how to exploit them
Android WebView is a system component that allows…
January 28, 2026
From WebView to Remote Code Injection
How a Misconfigured JSInterface led to an RCE
January 22, 2026