OAuth Misconfiguration

Detects Android intent redirection vulnerabilities where attacker-controlled intents are re-sent or forwarded, enabling privilege escalation.

Detects sensitive data stored in plaintext in SharedPreferences, SQLite databases, or external storage in Android applications.

Detects API endpoints that use user-supplied IDs to access objects without verifying the requesting user owns or has permission to access that object.

Detects API endpoints that perform privileged operations without verifying the caller has the required role or permission.

Detects Android Activities, Services, BroadcastReceivers, and ContentProviders exported without proper permission checks.

Detects old API versions that may lack current security controls and deprecated endpoints still accessible in production.

Detects passwords stored in plaintext or hashed with weak/unsalted algorithms instead of bcrypt/argon2/scrypt.

Detects missing session regeneration after login, allowing session fixation attacks.

Detects cookies set without Secure, HttpOnly, or SameSite attributes.

Detects login and authentication endpoints that lack rate limiting, account lockout, or CAPTCHA protection.

Detects insecure multi-factor authentication implementations that can be bypassed.

Detects sensitive API endpoints without rate limiting, enabling resource exhaustion, credential stuffing, and enumeration attacks.