195 matches found
Snapchat: Open prod Jenkins instance
@prebenve found a Jenkins instance where they could login with any valid Google account. Once logged in, they gained access to sensitive API tokens. The access also included some source code disclosure for public apps and the ability to execute arbitrary code via the Jenkins Script Console...
Snapchat: RTLO char allowed in chat
Hey all, There seems to be no filtering of strange unicode characters such as U+202E which is an Right-To-Left-Override. I can send messages like "Hey check out my new song at example.com/songrtlo3pm.exe" and everyone would see the link as "example.com/songexe.mp3". Links that end with .exe are...
iOS WebView Problem Allows Attackers to Initiate Phone Calls
iOS developers who have embedded Apple’s WebView into mobile apps need to be aware of an exploitable issue that could allow phone calls to a number of the attacker’s choosing. Researcher Collin Mulliner said the vulnerability is trivial to exploit, requiring at a minimum one line of HTML code. Th...
WhatsApp Android text Crash 0day Exploit
This code work on all Android versions. Don't work on all android emulators as nexus. It is a short code that acts on android. When Android PROCESS the code, the app gets a crash. Don't work if android don't process directly the code. tested and work 100% on: - whatsapp message. - whatsapp...
Snapchat: Bypassing "You've requested your data the maximum number of times today." + "Please Verify an email address with snapchat to continue"
Hello Again , I found an 2 issues in accounts.snapchat.com/accounts/downloadmydata - The first one : Bypassing The maximum number of Data Requests per day and download the Account Data any time the Attacker wants. - The Second : Download The Account Data without any Email verification. Requiremen...
Snapchat: Subdomain takeover of blog.snapchat.com
Overview The ANAME for blog.snapchat.com, which redirects to snapchat-blog.com, was pointing to tumblr for Snapchat's blog. This blog had been expired or had removed the CNAME claim. Adding "snapchat-blog.com" to the custom domain setting on tumblr allowed takeover of this subdomain. Repro Steps ...
Snapchat: Incoming email hijacking on sc-cdn.net
Hey guys! Really interesting find here. Summary These dangling MX records on sc-cdn.net have allowed me to purchase an email account with GoDaddy owner of these servers and send/receive email from an account on this domain. sc-cdn.net. 3599 IN MX 0 smtp.secureserver.net. sc-cdn.net. 3599 IN MX 10...
Snapchat: Subdomain takeover on http://fastly.sc-cdn.net/
Hey team, I've found a snapchat cdn domain here which had a test instance of fastly setup but did not remove the dns record when the service was cancelled. This allowed me to create a Fastly instance to take it over. I've confirmed this is a snapchat property via Censys...
Google finally announces Android N's name and It's not Nutella
No, it's not Nutella. Google has finally announced the official name of the latest version of its Android mobile software, codenamed Android N: "Nougat." Yes, the next version of sugary snack-themed Android and the successor to Android Marshmallow will now be known as Android Nougat, the company...
Snapchat: Administrator access to a Django Administration Panel on *.sc-corp.net via bruteforced credentials
Hey team, While doing some recon for Snapchat's domains, I came across a particular domain of interest - sc-corp.net. It seems that this domain hosts a lot of Snapchat's internal tools, web applications and staging environments such as Phabricator and other administration panels. From analyzing S...
Insta No Crop Efeitos SnapChat - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Insta No Crop Efeitos SnapChat published at the 'play' market has multiple vulnerabilities...
Editor De Foto Efeito Snapchat - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Editor De Foto Efeito Snapchat published at the 'play' market has multiple vulnerabilities...
Square Size SnapChat Desfoques - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Square Size SnapChat Desfoques published at the 'play' market has multiple vulnerabilities...
Snapchat: XSS found on Snapchat website
Hi Snapchat Team, I've found a reflected XSS vulnerability on this page: https://www.snapchat.com/add/snapchat Example: https://www.snapchat.com/add/%22%3E%3Ch1%3EXSS%3C%2Fh1%3E Note: you should visit the page with a mobile user-agent since the server displays different information based on the...
Snapchat: Subdomain takeover in http://support.scan.me pointing to Zendesk (a Snapchat acquisition)
harrymg helped us identify an issue in which support.scan.me's CNAME was pointing to scan.zendesk.com. Normally there would be a Zendesk instance there, but in this case, the Zendesk instance was no longer in use. As such, harrymg was able to "claim" scan.zendesk.com from Zendesk. As such, any...
Facebook will Let You Send Self-Destructing Messages with Messenger App
Facebook is planning to offer you the popular Snapchat feature in its Messenger app – 'Self-Destructing' Messages. Yes, Facebook is testing a new feature within its Messenger app that will allow its users to send self-destructing messages. Some Facebook users in France have spotted this new featu...
Snapchat: Password Reset - query param overrides postdata
Suppose a user were to reset their password at the following url with the given query parameters: https://accounts.snapchat.com/accounts/changepassword? newpassword=someNewPass&newpassword2=someNewPass Then regardless of the new password entered into the form, someNewPass becomes the user's new...
Government Asks for Security Community's Help on Technical Issues
LAS VEGAS–Washington is looking for a few good hackers. Politicians and policymakers in the United States generally are not thought of as being the most technically savvy lot. It’s a reputation that’s well-earned in some cases, with some politicians boasting about their inability to use email and...
Snapchat Offers Users Optional Two-Factor Authentication
Snapchat’s popularity with teens doesn’t run in parallel with the opinion of security and privacy professionals wary of its practices in guarding users’ data. With the release of the latest version of the photo and video sharing app, Snapchat added an optional two-factor authentication feature th...
