search

seigneur / gapPhoneX

Use a phonegap vulnerability in version prior to 2.6 to access the contents in android
0 stars 1 forks source link

Basic Attack #1

Closed seigneur closed 11 years ago

seigneur commented 11 years ago

So far only the test attack works, need to make the attack seamless and embed it as part of an audio tag

seigneur commented 11 years ago

Created the attack end point to steal geo location of the user and track the users location once a link has been clicked, need to add click on audio tag and redirect to link part.

seigneur commented 11 years ago

Added the access to the Google API - maps to the attacker so he can see where the victim is, only issue with this is that the app will require a Gelocation permission, which a music browser might not have. So we can keep this as added functionality for demo purposes. http://arunrn.com/dias/map.html

seigneur commented 11 years ago

Basic Attack Implemented Successfully!