Reverse Engineering Methodology Use jadx (used to analyze java bytecode) to disassemble an APK. Where to begin Start by looking at the AndroidManifest.xml. Look for app components that are available to other code on the device (exported): Search for: android:exported="true" Look at API calls that…

Wireshark Filter where the source ip is not 192.168.1.1 ip.src != 192.168.1.1 Filter where the destination ip is not 192.168.1.1 ip.dst != 192.168.1.1 TCPDump Filter on port 80 tcpdump port 80 Filter on source port 80 tcpdump src…

Sites with valid SSL certs ssl:"orgname" 200 Negative search This is used to specify things you don't want to be appended to your search -"content" An example could be: ssl:"orgname" 200 -"nosniff" Look for patterns in html html:…

JQL Show tickets created by a user This will also show them in descending order, which will give you the most recently created issues first. reporter = <username> order by created DESC Query by project project = "Project Name" Find issues belonging to an inactive user reporter in…

Log Responses Install the dump_io mod by running this as root: a2enmod dump_io Add these lines to the bottom of the /etc/apache2/apache2.conf file: LogLevel dumpio:trace7 DumpIOInput On DumpIOOutput On Restart the apache service to enact the changes: service apache2 restart View response data with…