Twiga - A Tool That Enumerates Android Devices For Information Useful In Understanding Its Internals And For Exploit Development

A tool that enumerates Android devices for information useful in understanding its internals and for exploit development. It supports android 4.2 to android 7.1.1 Requirements The most current ADB must be in your path and fully functional The report name must not have any whitespace Limitations...

Design/Logic Flaw

Airwatch Inbox for Android contains a vulnerability that may allow a rooted device to decrypt the local data used by the application. Successful exploitation of this issue may result in an unauthorized disclosure of confidential data...

CVE-2017-4896

Airwatch Inbox for Android contains a vulnerability that may allow a rooted device to decrypt the local data used by the application. Successful exploitation of this issue may result in an unauthorized disclosure of confidential data...

CVE-2017-4896

Airwatch Inbox for Android contains a vulnerability that may allow a rooted device to decrypt the local data used by the application. Successful exploitation of this issue may result in an unauthorized disclosure of confidential data...

CVE-2017-4896

CVE-2017-4896 affects VMware Airwatch Inbox for Android, where a rooted device may decrypt local app data, enabling potential confidential data disclosure. The vulnerability stems from weaknesses in local data protection within the Airwatch Inbox component. Affected software is Airwatch Inbox for...

Personalized User Focused Security: Stethoscope

Stethoscope is a web application that collects information from existing device data sources e.g., JAMF or LANDESK on a given user’s devices and gives them clear and specific recommendations for securing their systems. Stethoscope consists of two primary pieces: a Python-based back-end and a...

Coinbase: Information disclosure in coinbase android app

Per our policy, issues which require rooted victim devices are in-scope...

FAQ: Rooted\Jailbroken Device Detection in XenMobile MAM Only Mode

Q: Can devices in XenMobile MAM only mode detect rooted\jailbroken devices? A : The jailbreak flag which is present on the XenMobile server console which shows whether a device is jailbroken or not is only supported when the device is enrolled to MDM. The jailbreak flag is set by MDM and not by M...

w00t! Google OnHub Router actually Runs on Chrome OS; Here's How to Root it

Are you intrigued with the idea of disassembling things and making them work your ways? Then you’ll find this coverage to be one of its kind! Google OnHub Router runs ChromiumOS Chrome OS, the same Linux-based operating system that powers Google Chromebook laptops and desktops. Yeah, It's True. A...

WhatsSpy - Trace the moves of a WhatsApp user

WhatsSpy Public is an web-oriented application that tracks every move of whoever you like to follow. This application is setup as an Proof of Concept that Whatsapp is broken in terms of privacy. Once you've setup this application you can track users that you want to follow on Whatsapp. Once it's...

MercadoPago Android App Information Disclosure

Advisory ID Internal CORE-2014-0011 1. Advisory Information Title: MercadoPago Android App Information Disclosure Advisory ID: CORE-2014-0011 Date published: 2014-12-19 Date of last update: 2014-12-17 Vendors contacted: Mercadolibre Release mode: Coordinated release 2. Vulnerability Information...

Blackphone DEF CON Vulnerabilities Difficult to Exploit

If ever there was a hacking story screaming for clarity, it’s the Blackphone saga that unfolded during DEF CON. First off, yes, the device was rooted by a researcher who goes by the handle Justin Case @TeamandIRC on Twitter—but not in five minutes as has been previously reported. Yes, it requires...

SwiFTP 1.11 - Overflow DoS PoC

No description provided by source. Exploit Title: SwiFTP v1.11 Overflow Dos PoC Software Link: http://swiftp.googlecode.com/files/SwiFTP1.11.apk Version: v1.11 Tested on: Android OS G1 Rogers / Rooted CyanogenMod-4.0.4 !/usr/bin/perl Simple Dos Crap for the Android app : SwiFTP Server v1.11 by...

Chainfire's Pry-Fi Android App released to defend against NSA Spying under Public Wi-Fi

Turn your face in any direction, someone is always trying to spy on you; doesn’t matter who and what you are? Just yesterday we reported that Communications Security Establishment Canada CSEC in Canada and NSA are together, running a spying program called 'game-changer'. It was revealed that the...

Mobile Malware Captures Keystrokes and Screengrabs

New proof-of-concept mobile malware logs keystrokes and captures screen-grabs on jailbroken iOS and Android devices in order to steal online log-in credentials and other sensitive information from targeted devices. In an interview with Threatpost, Trustwave senior security consultant Neal Hindoch...

Eject any WiFi device from network using Android

If you want to disable any ip address which use same router to connect internet. Now you can used your android application, WifiKill use as can disable internet connection for a device on the same network. May be you ever use "NetCut" tool in your windows to eject any WiFi device from network wit...

Google Reacts to Google Wallet Security Issues

Google has temporarily disabled the provisioning of prepaid cards as the company deals with the fallout from the discovery of security vulnerabilities affecting Google Wallet. Google Wallet is a mobile payment application that enables users to store information such as credit cards on their mobil...

Hosting company Hostkey.ru got Compromised !

Hosting company Hostkey.ru got Compromised ! A hacked Hacked Into Hosting company Hostkey.ru, some Proof of hacks are here : 1. Cms Hacked 2. PhpMyAdmin Hacked 3. Shell on Server 4. Config File https://pastebin.com/VbuD0acE 5. Server Rooted https://pastebin.com/h5RW3w6c Full compromise step-by-st...

Motorola Xoom Gets Hacked In Under An Hour after Release !

Despite just being released on February 24th, the Motorola Xoom has become the newest victim of developer rooting, and it took less than two hours to do it. Xeriouxly. The best part? The Clockwork Recovery running on it means that other developers can now create their own custom ROMs to hack...

Atrix 4G Hacked Before You Can Even Buy It !

Following in the steps of the HTC Evo before it, the Motorola Atrix 4G has been hacked to give root privileges before the phone is even available to buy. In more evidence that Android hackers are frequently out-pacing the creators of the phones themselves, the third post in the xda-developers...