praneeth132006

Retrieve another tenant's or another user's documents from a shared vector store by exploiting similarity search that is not bounded by an…

Enforce and detect server-side the authorization and workflow rules a mobile client cannot be trusted to keep.

Abuse the trust a backend places in its mobile client during an authorized assessment.

Add binary protections and, above all, remove client-side trust against OWASP Mobile Top 10 M7.

Demonstrate Insufficient Binary Protections (OWASP Mobile Top 10 M7) during an authorized mobile assessment — bypassing an app's…

Use cryptography correctly in a mobile app against OWASP Mobile Top 10 M10.

Harden how a mobile app stores data at rest so a lost, stolen, backed-up, or rooted/jailbroken device does not leak credentials, tokens…

Abuse insecure deep links and inter-app entry points during an authorized mobile assessment.

Harden a mobile app's deep links and inter-app entry points so a crafted link cannot trigger sensitive actions, redirect callbacks, or…

Extract hardcoded secrets from a mobile app binary during an authorized mobile assessment.

Recover sensitive data a mobile app leaves on the device during an authorized mobile assessment.

Intercept and read a mobile app's network traffic during an authorized mobile assessment.