Very cool XXE bug in a Web ServiceXXE offers a great attack avenue for reading files from a vulnerable Web Apps. I found an XXE bug in a SOAP Web Service during a pentest…Mar 31, 2020Mar 31, 2020
Android: How to Bypass Root Check and Certificate PinningRecently I needed to pentest an Android application. When I installed the app in my virtual device (Android Emulator), a pop up…Feb 6, 2020Feb 6, 2020