NEW BOT Телеграм, страница

Android Worm Malware spreads via SMS in India as TikTok Pro [malware demo]
https://youtu.be/mzkDxBjshI4

Android worm malware spreads via SMS in India as TikTok Pro | Android Malware | Fake TikTok Pro

TikTok app was recently banned in India

Malware developers have promptly misused the situation to distribute Android SMS worm disguised as Tiktok Pro.
Once user installs the app, it send SMS to all the contacts with a link to the malicious app.
After the…

5.33K views07:06

👍 13 👎 1 💬

Android Security & Malware

Google has removed 29 apps from the Play Store which were found filled with adware. These Android apps had over 3.5 million downloads on the Play Store.
https://www.whiteops.com/blog/bringing-blur-apps-into-focus

HUMAN

Bringing Blur Apps Into Focus

The White Ops Threat Intelligence and Research Team uncovered an operation dubbed 'ChartreuseBlur', a collection of blur apps committing ad fraud.

5.02K views07:42

👍 13 👎💬

Android Security & Malware

Setting Up An Android VM For Analyzing Mobile Applications
https://github.com/1d8/Android-Analysis

GitHub

GitHub - 1d8/Android-Analysis: Getting Genymotion & Burpsuite setup for Android Mobile App Analysis

Getting Genymotion & Burpsuite setup for Android Mobile App Analysis - 1d8/Android-Analysis

9.63K views08:56

👍 29 👎 1 💬

Android Security & Malware

AppSec: How to NOT create a job Android app [analysis]
https://medium.com/@fs0c131y/appsec-how-to-not-create-a-job-app-5b2776d16464

Medium

AppSec: How to NOT create a job app

Few days ago, I received this private message on Twitter.

4.59K views10:22

👍 17 👎 2 💬

Android Security & Malware

Android InsecureBankv2 Walkthrough
Part 1: https://medium.com/bugbountywriteup/android-insecurebankv2-walkthrough-part-1-9e0788ba5552
Part 2: https://medium.com/bugbountywriteup/android-insecurebankv2-walkthrough-part-2-429b4ab4a60f
Part 3: https://medium.com/bugbountywriteup/android-insecurebankv2-walkthrough-part-3-2b3e5843fe91

Medium

Android InsecureBankv2 Walkthrough: Part 1

In this article, I will be taking a look at the InsecureBankv2 Android application created by the GitHub user dineshshetty. According to…

5.08K views06:20

👍 17 👎💬

Android Security & Malware

Exploiting Android Messengers with WebRTC: Part 1
https://googleprojectzero.blogspot.com/2020/08/exploiting-android-messengers-part-1.html

Blogspot

Exploiting Android Messengers with WebRTC: Part 1

Posted by Natalie Silvanovich, Project Zero This is a three-part series on exploiting messenger applications using vulnerabilities in We...

8.7K views19:00

👍 21 👎💬

Android Security & Malware

MMS Exploit Part 4: MMS Primer, Completing the ASLR Oracle
https://googleprojectzero.blogspot.com/2020/08/mms-exploit-part-4-completing-aslr-oracle.html

Blogspot

MMS Exploit Part 4: MMS Primer, Completing the ASLR Oracle

Posted by Mateusz Jurczyk, Project Zero This post is the fourth of a multi-part series capturing my journey from discovering a vulnerabl...

4.7K views20:17

👍 9 👎💬

Android Security & Malware

Exploiting Android Messengers with WebRTC: Part 2
https://googleprojectzero.blogspot.com/2020/08/exploiting-android-messengers-part-2.html

Blogspot

Exploiting Android Messengers with WebRTC: Part 2

Posted by Natalie Silvanovich, Project Zero This is a three-part series on exploiting messenger applications using vulnerabilities in WebR...

4.41K views21:31

👍 6 👎💬

Android Security & Malware

Reversing the Root
Identifying the Exploited Vulnerability in 0-days Used In-The-Wild
https://github.com/maddiestone/ConPresentations/blob/master/BH2020.ReversingTheRoot.pdf

4.45K views09:07

👍 11 👎💬

Android Security & Malware

NSA tips how to limit location data exposure
https://media.defense.gov/2020/Aug/04/2002469874/-1/-1/0/CSI_LIMITING_LOCATION_DATA_EXPOSURE_FINAL.PDF

5.51K views09:19

👍 21 👎💬

Android Security & Malware

Exploiting Android Messengers with WebRTC: Part 3
https://googleprojectzero.blogspot.com/2020/08/exploiting-android-messengers-part-3.html

Blogspot

Exploiting Android Messengers with WebRTC: Part 3

Posted by Natalie Silvanovich, Project Zero This is a three-part series on exploiting messenger applications using vulnerabilities in WebR...

4.19K views11:31

👍 5 👎💬

Android Security & Malware

Android application exploitation
https://docs.google.com/presentation/d/15bi5pndttfCzMEMw8GT2oCHCJvHx_a8YszkkSMtp_jE/edit#slide=id.p1

Google Docs

B3nac - Android application exploitation

Android application exploitation By Kyle B3nac @b3nac

4.48K views11:53

👍 18 👎💬

Android Security & Malware

Android: Access to app protected components
https://blog.oversecured.com/Android-Access-to-app-protected-components/

News, Techniques & Guides

Android: Access to app protected components

Introduction This vulnerability resembles Open Redirect in web security. Since class Intent is Parcelable, objects belonging to this class can be passed as extra data in another Intent object. Many...

4.67K views12:01

👍 18 👎💬

Android Security & Malware

Qualcomm chip vulnerability
400 vulnerable code sections were uncovered on Qualcomm’s Snapdragon digital signal processor (DSP) chip
https://media.defcon.org/DEF%20CON%2028/DEF%20CON%20Safe%20Mode%20presentations/DEF%20CON%20Safe%20Mode%20-%20Slava%20Makkaveev%20-%20Pwn2Own%20Qualcomm%20compute%20DSP%20for%20fun%20and%20profit.pdf

4.76K views12:13

👍 12 👎💬

Android Security & Malware

TiYunZong: An Exploit Chain to Remotely Root Modern Android Devices
https://github.com/secmob/TiYunZong-An-Exploit-Chain-to-Remotely-Root-Modern-Android-Devices/blob/master/us-20-Gong-TiYunZong-An-Exploit-Chain-to-Remotely-Root-Modern-Android-Devices.pdf

GitHub

TiYunZong-An-Exploit-Chain-to-Remotely-Root-Modern-Android-Devices/us-20-Gong-TiYunZong-An-Exploit-Chain-to-Remotely-Root-Modern…

Contribute to secmob/TiYunZong-An-Exploit-Chain-to-Remotely-Root-Modern-Android-Devices development by creating an account on GitHub.

5.3K views12:52

👍 13 👎 1 💬

Android Security & Malware

Android Bug Foraging
Analysis of vulnerabilities found in:
-Tinder
-Google Camera
-Samsung Find My Mobile
-undisclosed app name
https://youtu.be/qbj-4NXsE-0

YouTube

Pedro Umbelino | Joao Morais - Android Bug Foraging - DEF CON 28SM AppSec Village

The speakers are waiting for your questions on the DEF CON Discord server!
Join us (here: https://discord.gg/defcon), and join the channels:
#asv-talks-qa-text
#asv-talks-qa-voice

In this session, we will analyze four real-world examples of different high…

5.34K views10:36

👍 16 👎💬

Android Security & Malware

Forwarded from The Bug Bounty Hunter

Hacking iOS Simulator with simctl and dynamic libraries

https://curvedlayer.com/2020/08/09/ios-simulator-plugin-simctl.html

Curvedlayer

Hacking iOS Simulator with simctl and dynamic libraries

Extend the iOS Simulator by building a plugin for it. A dynamic loader and simctl allow injecting custom code into the Simulator. With that, you can modify its behavior.

4.55K views15:23