Bug Bounty Blogs and Writeups

A curated list of the best bug bounty blogs and writeups for learning and inspiration.

Top mobile security risks

A comprehensive Checklist for Android Bug Bounty

Comprehensive testing guide

Beginner's guide to Android reversing

Online detection tool

Box's security guidelines

Android security part 18

Common WebView issues

Setup and tips for recon

Remote code execution via WebView

Guide for emulator setup

Targeting mobile apps

Oversecured blog post

Via third-party package contexts

Android security issue

Universal XSS and cookie theft

Android security issue

Penquin

Bug Bounty Blogs and Writeups

OWASP Mobile Top 10 2016

Mindmap

OWASP Mobile Security Testing Guide

Android Applications Reversing 101

Detect secret leaks in Android apps

Android Security Guidelines

Attacking Broadcast Receivers

Android WebView Vulnerabilities

Android APK Recon Setup

WebView addJavascriptInterface RCE

Install PlayStore on Emulator

Android Bug Bounty Tips

Access to Protected Components

Arbitrary Code Execution

Interception of Implicit Intents

Evernote Vulnerabilities

Gaining Access to Content Providers

@vaishalinagori112 on Medium

@prasadraj954 on Medium

B3nac’s Android Reports and Resources

Sandeep Wawdane

Oversecured Blog

CorSecure Blog

Frida Official Documentation

SecurityBreached (Babayaga47)

DeeSee's Android Security Resources

Hacker101: Mobile Crash Course

Mobisec Slides

Bypassing Certificate Pinning (vavkamil)

Android Hacking Primer

OWASP Mobile Top Ten 2023 – fi5t

Android SMS Stealer – Max Kersten

Hacking SMS API via Static Analysis – Security Breached

Bug Bounty Hunting Tips (Mobile Apps – Android Edition)

Getting Started in Android Pentesting

Exploiting Insecure Firebase DB

Finding Leaked AWS Creds in Android Apps

200+ Bounty Payouts: SQLi in Content Providers

8 Ways to Bypass SSL Pinning in iOS

YesWeHack guide to Android Bug Bounty

RootAVD(Root your android virtual device)

Intent Abuse in Google Messages for Wear OS

Android recon for Bug Bounty hunters: A complete guide from APK extraction to mapping attack surfaces