InAppBrowser is a tool that can monitor all JavaScript commands executed by an application.

previous project developer Felix Krause Published a report on the risks of mobile apps using in-app browsers. Some applications, such as Instagram and Facebook, inject JavaScript code into third-party websites, which creates potential security and privacy risks for users.

How does it work?

The developer creates a new plain HTML file, overwriting some JS codedocument.method.

document.getElementById = function(a, b) {
    appendCommand('document.getElementById("' + a + '")')
    return originalGetElementById.apply(this, arguments);
}

how to use

Open InAppBrowser.com with the iOS/Android application of your choice. If it’s a social media app, post the link; if it’s a messenger, send the link to yourself and try to open the page as part of their in-app web browser.