Bhuwan Bhetwal's HandBook

Write

Connecting android/emulator to your Burp suite via OpenVPN

Nov 16, 20242 min read

CSRF + POST Body Param Reflection = POST-Based XSS (A BrainFuck)

Nov 8, 20244 min read

Mobile Application Penetration Testing Setup In Linux

Download Genymotion with virtual box: https://www.genymotion.com/product-desktop/download/ Installing Genymotion1. You can see something like “genymotion-3.X.X-linux_x64.bin” in your Downloads directory.2. Open your terminal and navigate to your Down...

Dec 25, 20248 min read

Breaking In: How RXSS and SQLi Can Lead to Full Account Takeover and Database Access

Nov 7, 20243 min read

Get your python 3.11.9 back on Linux

Nov 7, 20241 min read

Adding Knoxnl (KNOXSS) to Burp

Open Burp > Extensions Install Piper Go to Piper > Context menu items Click on Add Button and Enter Name as “knoxnl” In the Add menu item dialog box, enter the Name as knoxnl and change the Can handle... drop down to HTTP requests only. Change b...

Nov 7, 20242 min read

Bypassing Root Detection in EvilCorp Mobile App (Without Runtime Tools)

I recently stumbled upon an interesting misconfiguration in the EvilCorp Bug Bounty Program. The Android application had Root/Jailbreak Detection enabled, and my goal was to bypass it without relying on runtime manipulation tools like Frida, Objectio...

Aug 29, 20245 min read

Command Palette

Latest articles