notes

htrgouvea · Oct 11, 2024 · e72e36d · e72e36d
1 parent c07f265
commit e72e36d
Showing 1 changed file with 18 additions and 0 deletions.
diff --git a/lib/Spellbook/Android/notes.txt b/lib/Spellbook/Android/notes.txt
@@ -0,0 +1,18 @@
+read the source code searching for insecure connections, like HTTP, WS, FTP, SMTP;
+Search for private keys (criptography or simple secrets);
+    SECRET_KEY
+LFI/ Private file access
+Unprotected activities
+Unprotected services
+Intent redirection
+Incorrect URL verification
+Cross-app scripting
+Deep link
+    - CSRF
+    - Open redirection
+    - XSS
+    - LFIs
+
+AndroidManifest.xml
+- resources.arsc/strings.xml
+- res/xml/file_paths.xml