Author Archives: Mr John

MobSF Android Activity APK Pentest

Posted on January 19, 2023 by Mr John

it is my first time with MobSF and Android APK assessment. I have found something while testing a specific APK and I am trying to understand the concept behind it:
Under HARDCODED_SECRETS in MobSF, was found a pair of KEY/SECRET related to… Continue reading MobSF Android Activity APK Pentest→

Posted in Android, Mobile, Mobile App, penetration-test, static analysis

DNS Enumeration by IP Address

Posted on May 5, 2022 by Mr John

I know all baseline steps to do DNS enumeration over a domain. But my questions is: how can I enumerate a server when I do not know which domain it is managing and I only have its IP address?
My scenario: I discovered 2 DNS servers running… Continue reading DNS Enumeration by IP Address→

Posted in dns, dns-domain, enumeration, reconnaissance | Tagged fingerprinting