CVE-2020-6514

CVE-2020-6514 El exploit Al escribir el exploit, originalmente alteré los paquetes SCTP enviados al dispositivo objetivo modificando el código fuente de WebRTC y recompilándolo. Esto no era práctico para atacar aplicaciones de código cerrado, así que eventualmente cambié a usar Frida para hookear...

thats_no_pipe

Thats no pipe Proyecto basado en Frida para interceptar la comunicación por named pipes de Windows Objetivos Este proyecto tiene como objetivo interceptar comunicaciones IPC mediante el hooking de funciones WinAPI específicas y reenviarlas a un proxy HTTP utilizando un websocket. Arquitectura La...

APKLab

APKLab The ultimate Android RE experience right inside your VS Code. APKLab seamlessly integrates the best open-source tools: Apktool, smali-lsp, Jadx, uber-apk-signer, apk-mitm and more to the excellent VS Code so you can focus on app analysis and get it done without leaving the IDE. Features...

whatsapp-mitd-mitm

WhatsApp MitD & MitM Introduction This repository contains PoC code and tools that were developed as part of our research 01 on remotely exploiting Man-in-the-Disk MitD vulnerabilities on WhatsApp for Android. As discussed in our blog post, the code and accompanying scripts found here, were used ...

Exploiting Android Messengers with WebRTC: Part 3

Posted by Natalie Silvanovich, Project Zero This is a three-part series on exploiting messenger applications using vulnerabilities in WebRTC. CVE-2020-6514 discussed in the blog post was fixed on July 14 with these CLs.This series highlights what can go wrong when applications don't apply WebRTC...