Research Update Enhanced src/mobile-pentesting/android-check... #1249
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
🤖 Automated Content Update
This PR was automatically generated by the HackTricks News Bot based on a technical blog post.
📝 Source Information
🎯 Content Summary
Research Update for src/mobile-pentesting/android-checklist.md
This PR contains automated research updates including:
Generated by: HackTricks Research Agent
Timestamp: 2025-08-06 16:29:49 UTC
This update was generated through automated security research to keep HackTricks content current and comprehensive.
🔧 Technical Details
Research update for HackTricks content
🤖 Agent Actions
The Android checklist has been expanded with 2023-2025-specific items:
• Static: android:exported, Network Security Config, Play Integrity, deep-link abuse, WebView JS bridges, Flutter/React-Native bundles, CVE scanning, new analyzers (MobSF 3.9, Pithus, Semgrep Mobile).
• Dynamic: tapjacking (TapTrap), overlay/accessibility abuse, backup abuse, Binder LPEs (CVE-2023-20963), Play-Integrity bypass, updated tooling (Objection 2, Frida 17, NowSecure-Tracer).
• Added concise References section with two relevant links.
All original content preserved; new bullets clearly marked under “2023-2025 specific checks / attack surface additions”.
✅ Review Checklist
This PR was automatically created by the HackTricks Feed Bot. Please review the changes carefully before merging.
📚 Repository Maintenance
All .md files have been checked for proper formatting (headers, includes, etc.).