VK.com: Логирование ответов запросов VK API в приложении Клевер

Просмотр логов в режиме дебага...

VK.com: Злом (virus).. Смотрим кто голосовал в анонимном опросе!!

Просмотр участников в некоторых анонимных опросах...

VK.com: Определение id по номеру телефона

Недостаточность проверок в определенных запросах...

Still Stealing

Two years ago in October 2015 we published a blogpost about a popular malware that was being distributed from the Google Play Store. Over the next two years we detected several similar apps on Google Play, but in October and November 2017 we found 85 new malicious apps on Google Play that are...

VK - Certificates or keys found, Exported ContentProvider, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application VK published at the 'play' market has multiple vulnerabilities...

Automated posting on Vkontakte public pages using VK API and Python

Vk.com Vkontakte is the most popular social network Russia and Ex-USSR with 430+ million users. Originally it was a Facebook clone. But now, after 10 years of development, these two services are quite different from each other. Traditional advantages of vk.com - huge amount of free music and vide...

VK.com: Получение предложенных фотографий паблику

Просмотр предложенных фотографий в пабликах. F337668 Обычным перебором id фото мы сохроним все фото к себе в альбом паблика Нужен аккаунт "А" с которого предлагаются фото в паблик и скопируйте ссылки на фото Передайте их аккаунту "Б" , на котором перейдите к уязвимости и вставьте индификаторы...

VK Live - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application VK Live published at the 'play' market has multiple vulnerabilities...

VK LikeCheсker: поиск лайков - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application VK LikeCheсker: поиск лайков published at the 'play' market has multiple vulnerabilities...

VK Docs - Customized SSL, LGPL license vulnerabilities

HackApp vulnerability scanner discovered that application VK Docs published at the 'play' market has multiple vulnerabilities...

VK.com: Возможность провести DoS атаку от имени vk.com сервера

DoS-атака со стороны серверов VK...

Picture Saver for VK - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Picture Saver for VK published at the 'play' market has multiple vulnerabilities...

vk-music.ru XSS vulnerability

Vulnerable URL: http://vk-music.ru/?q=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1160639 VIP website...

Friends Locator for VK Lite - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Friends Locator for VK Lite published at the 'play' market has multiple vulnerabilities...

oauth.vk.com Open Redirect vulnerability

Vulnerable URL: https://oauth.vk.com/authorize?clientid=2283932uri=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 18.10.2017 Latest check for patch:| 18.10.2017 12:19 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...

Polyglot for VK - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Polyglot for VK published at the 'play' market has multiple vulnerabilities...

Music and Video for VK - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Music and Video for VK published at the 'play' market has multiple vulnerabilities...

VK.com: Checking whether user liked the media or not even when you are blocked

Poc : Take 2 accounts A and B 1. Now from A id make a random post say http://vk.com/id307083341?w=wall30708334136 2.Now from C id try to like the post of A . 3.Now from B id visit https://vk.com/dev/likes.getList 4. now put the owner id A and the post id == 307083341 which 36 in this case 5.and i...

VK.com: Внедрение произвольного javascript-сценария в функционале просмотра изображений мобильной версии сайта

Уязвимость существует из-за недостаточной обработки пользовательских данных, полученных из объекта location url, который используется в функции photo.fullscreen. Функция выполняется при активации события onclick, который срабатывается при клике на фотографию В настоящее время существует фильтраци...

VK Community - Filter Bypass & Persistent Vulnerability

Document Title: =============== VK Community - Filter Bypass & Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1511 View Video: https://www.youtube.com/watch?v=S3lCQVx32Ho Release Date: ============= 2015-07-10 Vulnerability Laboratory ID VL-ID:...