9 matches found
whatsapp-mitd-mitm
WhatsApp MitD & MitM 简介 此仓库包含作为我们研究01一部分开发的PoC代码和工具，旨在远程利用Android版WhatsApp的 磁盘中间人 （MitD）漏洞。正如在我们的博客文章中讨论的，这里提供的代码和附带脚本被用于利用CVE-2020-6516（Chrome）02和CVE-2021-24027（WhatsApp）03。 此仓库的结构如下： 当前目录包含使用Frida钩住WhatsApp、发送携带CORS绕过载荷的钓鱼消息并运行HTTP服务器的Python工具，来自受害者设备的被窃取会话文件将被发送到该服务器。 tls12pskextract/ 包含TLS v1...
Unpatched Android App with 1B Downloads Allows RCE
An Android app that’s been downloaded more than 1 billion times is riddled with flaws that can let attackers hijack app features or overwrite existing files to execute malicious code, or launch man-in-the-disk MiTD attacks on people’s devices, researchers discovered. The flaws exist in an app...
Unpatched ShareIT Android App Flaw Could Let Hackers Inject Malware
Multiple unpatched vulnerabilities have been discovered in SHAREit, a popular app with over one billion downloads, that could be abused to leak a user's sensitive data, execute arbitrary code, and possibly lead to remote code execution. The findings come from cybersecurity firm Trend Micro's...
Fortnite Android App Falls Victim to Man-in-the-Disk Flaw
Epic Games has patched a critical man-in-the-disk MiTD flaw for the Android version of the wildly popular Fortnite game – although controversy has swirled after Google decided to ignore a 90-day disclosure request from the gaming company. The issue exists in the Fortnite Installer, which download...
Critical Flaw in Fortnite Android App Lets Hackers Install Malware
Security researchers from Google have publicly disclosed an extremely serious security flaw in the first Fortnite installer for Android that could allow other apps installed on the targeted devices to manipulate installation process and load malware, instead of the Fortnite APK. Earlier this mont...
Millions of Android Devices At Risk of Man-in-the-disk Attack
By Waqas Thanks to Ignorant App Developers At Defcon 2018, we have so far witnessed many innovative forms of compromising devices including electoral voting machines. However, this latest revelation "Man-in-the-disk Attack" is quite surprising and to a great extent concerning for Android users...
New Man-in-the-Disk attack leaves millions of Android phones vulnerable
Security researchers at Check Point Software Technologies have discovered a new attack vector against the Android operating system that could potentially allow attackers to silently infect your smartphones with malicious apps or launch denial of service attacks. Dubbed Man-in-the-Disk, the attack...
New Man-in-the-Disk attack leaves millions of Android phones vulnerable
Security researchers at Check Point Software Technologies have discovered a new attack vector against the Android operating system that could potentially allow attackers to silently infect your smartphones with malicious apps or launch denial of service attacks. Dubbed Man-in-the-Disk , the attac...
DEF CON 2018: ‘Man in the Disk’ Attack Surface Affects All Android Phones
A function of the Android storage mechanism opens up an attack surface that affects all Android devices, and allows an attacker to corrupt data, steal sensitive information or even take control of a mobile phone. Simply put, the issue – dubbed “man in the disk” – allows a bad actor to hijack the...