TGViewer
Android Security & Malware Android Security & Malware @androidmalware · 44.8K subscribers
Post #2332 13.7K
Exploiting JavaScript Interface for Unauthorized Access in a Kucoin cryptocurrency exchange Android app
https://hulkvision.github.io/blog/javascript-interface/exploiting-javascript-interface/
hulkvision Exploiting JavaScript Interface for Unauthorized Access in a 'global' cryptocurrency exchange android app How I exploited an exposed JavaScript interface in a major crypto exchange's Android app to perform authenticated actions like placing trades and deactivating accounts.
  • 👍 8
  • ❤ 3
  • 🤯 3
  • 🌚 2
  • 👏 1
Open in Telegram All posts from @androidmalware
More from @androidmalware
  1. Oct 1, 2026CVE-2026-86950: The Great Glyph Grift An in-the-wild iOS bug with a possible WhatsApp zero…
  2. Sep 29, 2026CVE-2026-20687: AppleJPEGDriver startDecoder Timeout UAF — iOS/macOS kernel vulnerability…
  3. Sep 29, 2026How we found 24 Android vulnerabilities using our open source AI security agent https://gi…
  4. Sep 29, 2026From BlackCat to Panda Workshop: Inside the Evolving C2 Panel Behind RATHat https://www.cl…
  5. Sep 28, 2026apk-reverse: An Agent Skill for Android APK reverse engineering, debloating, ad removal, s…
  6. Sep 28, 2026A native APK and DEX decompiler written in Rust https://github.com/Ch0pin/rdx
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →