– Open Firebase Database – Arbitrary URL Injection in WebView (with JS) x2 – Anti-Root detection Bypass