Відео

yes it have vdp

yes we can use command also using adb or other tools

The Activity Launcher APK is used for accessing hidden activities, creating shortcuts, app development/testing, and bypassing restrictions. In this video, I'll demonstrate how to bypass the login/PIN activity of the Vault app using the Activity Launcher APK. Specifically, I will launch the PrivacySpace activity directly through this APK. When we open the Vault app manually, it follows a sequence set by the developer, such as SplashScreen > LoginPage > MainActivity. In this case, we'll bypass the standard flow and launch MainActivity directly with the help of the Activity Launcher APK.

I didn’t see any bypass in the video, Can you please recheck it what you uploaded. Thanks

@@ayushmanngupta7027 Thank you. If you don't know what it is, please learn about Android penetration testing.

@@bugbountypoc395 can you share some resources to learn android pentesting?

The Activity Launcher APK is used for accessing hidden activities, creating shortcuts, app development/testing, and bypassing restrictions. In this video, I'll demonstrate how to bypass the login/PIN activity of the Vault app using the Activity Launcher APK. Specifically, I will launch the PrivacySpace activity directly through this APK. When we open the Vault app manually, it follows a sequence set by the developer, such as SplashScreen > LoginPage > MainActivity. In this case, we'll bypass the standard flow and launch MainActivity directly with the help of the Activity Launcher APK.

Plzzz tell Wich site

Why?

thanks but hacker1 accpect it as race

@@bugbountypoc395 Cool, you could demonstrate it better with a python script. Did it have rate limiting combined with race condition, or just rate limiting ?

@@gobakos7890 i think there was no rate limit bt hacker1 trigger in race

Because an author can rate a user’s account, but the user has no access to rate their own comment.

nahh i think its stored xss. what you think about it?

😣😣❤

Can you share your script ?

@@meghantashi the way you use it is with -p option send special characters with unique identifier and check their reflection to determine whether there is html encoding in place or not. e.g. (rxss -i hosts.txt -p "z3nshell>")

github.com/payloadbox/xss-payload-list/blob/master/Intruder/xss-payload-list.txt

@@bugbountypoc395 Can you tell me which payoad did you use among the list. keep sharing thank you

This payload is made for testing HTML injection, cross-site scripting, SQL injection, and SSTI in a single payload.

​@@bugbountypoc395 I want to know what the payload example looks like🤔 To complete my tools

@@bugbountypoc395wth , so many vulnerability

@@user-41044 ssti {{2*10}} = 20

1 year subscription

What are examples of these payloads?

😢😢😢

both

thanks ❤❤

Any bounty?

@@abhinavbansal9396 $$$

@@bugbountypoc395 how much u got?

join my telegram channel

​@@bugbountypoc395link?

thank you❤❤

yes

of course why not

check telegram

duplicate

@@bugbountypoc395 give me your twitter

nah duplicate

I always getting duplicates, what should we do ​@@bugbountypoc395