Write-up

high-level working of the method

How to Intercept Traffic from Proxy Unaware Application Using DNSChef

| | Application Security, DNS proxy, DNSChef, Penetration Testing, proxy unaware application, Write-up
In this blog, we will dive into an interesting method for intercepting traffic from applications implementing SSL Pinning and applications that do not respect system proxies. Xamarin, for instance, relies on the ...
WeSecureApp :: Simplifying Enterprise Security
JavaScript in Android Application

Execution of Arbitrary JavaScript in Android Application

| | Application Security, cross-site scripting, Cyber Security, deep links, WebView, Write-up
In this blog, we will learn about the possible ways to find cross-site scripting by abusing JavaScript in Android applications. Cross-site scripting (XSS) in an Android application occurs when an attacker successfully ...
WeSecureApp :: Simplifying Enterprise Security
contact us form

How contact forms can be exploited to conduct large scale phishing activity?

| | Application Security, Phishing, Phishing Attacks, security assessment, Write-up
A contact form for customer inquiries is one of the most common features present on the websites of most companies. It provides an easy way for prospective customers to get in touch ...
WeSecureApp :: Simplifying Enterprise Security!
security assessment

PDF Generator’s Eternal Bond with SSRF

| | Application Security, Cyber Security, secure code, security assessment, Write-up
As part of the Application Security Assessment, we have come across the vulnerability Server Side Request Forgery (SSRF) using HTML Injection, via PDF and image generator. As the vulnerability name suggests, an ...
WeSecureApp :: Simplifying Enterprise Security!
Professionally Evil Fundamentals: Introduction

Solving the November 13th Detective Nevil Mystery Challenge

| | .gdb, ARM, ASM, challenge, debug, debugging, Detective Nevil Mystery Challenge, Linux, payload, Penetration Testing, Professionally Evil, programming, Pwntools, Reverse Engineering, Write-up
Overview Each week on Friday, we post a social media challenge known as “Detective Nevil Mystery Challenge”.  On November 13th of 2020, we released a challenge that contained a payload and it ...
Professionally Evil Insights
Professionally Evil Fundamentals: Introduction

Solving the November 13th Detective Nevil Mystery Challenge

| | .gdb, ARM, ASM, challenge, debug, debugging, Detective Nevil Mystery Challenge, Linux, payload, Penetration Testing, Professionally Evil, programming, Pwntools, Reverse Engineering, Write-up
Overview Each week on Friday, we post a social media challenge known as “Detective Nevil Mystery Challenge”.  On November 13th of 2020, we released a challenge that contained a payload and it ...
Professionally Evil Insights