Elliot Alderson
@fs0c131y
French security researcher. Worst nightmare of Oneplus, Wiko, UIDAI, Kimbho, Donald Daters and others. Not completely schizophrenic. Not related to USANetwork.
Tweets
- Tweets, current page.
- Tweets & replies
- Media
You blocked @fs0c131y
Are you sure you want to view these Tweets? Viewing Tweets won't unblock @fs0c131y
- Pinned TweetThanks. Twitter will use this to make your timeline better. UndoUndo
- Elliot Alderson Retweeted
New: obtained internal Facebook docs that focus on multiple elections that took place in 2018, and how Facebook prepared its content moderators. Zuckerberg says its about protecting democracy; slides show also concerned with putting out "PR fires"https://motherboard.vice.com/en_us/article/8xyn9v/leaked-documents-facebook-elections-content-moderation-pr-fires …
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo - Elliot Alderson Retweeted
Hi, you can read this thread from
@fs0c131y here: https://threader.app/thread/1089875038415872000 …#AndroidThanks. Twitter will use this to make your timeline better. UndoUndo -
I should write a blog post on this
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo -
It took me 5 minutes to bypass these limitations.
@uidai if you want to secure your app and so the data of you fellow citizens, hire some real professionals 22/22pic.twitter.com/YqJ4sU9uHQShow this threadThanks. Twitter will use this to make your timeline better. UndoUndo -
I only change the background image in the splash screen because I'm a nice guy but imagine if I added malicious code inside? A malicious actor can create a malware based on the mAadhaar app without any problems
21/nShow this threadThanks. Twitter will use this to make your timeline better. UndoUndo -
And voila, we have our custom mAadhaar app!https://www.youtube.com/watch?v=BnM_fEYL1AQ …
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo -
In the res/drawable folder, I replaced the photo splash_bg.jpg, I recompiled and resigned the app 19/n
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo -
When you open the app, you have the photo of a kid in the splash screen, let's replace that with the photo of my choice
18/nShow this threadThanks. Twitter will use this to make your timeline better. UndoUndo -
Open the file SplashScreenActivity.smali and remove the correct lines of code 17/npic.twitter.com/as3yTzwtTx
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo -
Thanks to apktool, we can decompile the app to obtain the smali code https://ibotpeaches.github.io/Apktool/ 16/n
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo -
Now we understood the whole thing, it's time to create our custom mAadhaar app! 15/n
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo -
To bypass this check, we will remove this check in the smali code 14/n
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo -
According to the doc, you just have to add these 4 lines to use the library. Look similar to something no? Yes, this is our "new b(((Context)this)).a()" 13/npic.twitter.com/ULDkVnADwV
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo -
This method is coming from a package called "com.scottyab.rootbeer". The
@uidai developers used the rootbeer library to detect if the device is rooted https://github.com/scottyab/rootbeer … 12/nShow this threadThanks. Twitter will use this to make your timeline better. UndoUndo -
Time to understand, what is this "new b(((Context)this)).a()" 11/npic.twitter.com/sD1LJSb8zB
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo -
There is 2 ways to remove this anti-tampering mechanism. Updating the hardcoded sha-256 in the in . gov . uidai . mAadhaarPlus . h . a with the sha-256 of your signature or simply remove the check in the onCreate method 10/n
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo -
As you can see these 2 methods are coming from the same f class. This class is clearly a homemade anti-tampering mechanism. By comparing the sha-256 signature of the app with a hardcoded sha-256, they want to prevent people from modifying and redistributing the app... 9/npic.twitter.com/IOevPdX3vv
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo -
v4 is equals to 0 when f.a(((Context)this) or f.b(((Context)this) are false 8/npic.twitter.com/E1hoerEQc1
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo -
This means that the "normal execution" of the app is when the code is going in the else if loop. Now, we want to understand when v4 = 0 and new b(((Context)this)).a() is equals to true 7/npic.twitter.com/111eb5FQiE
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo -
First observation: the finish() method is called at the end of the method. According to the documentation, the finish() is called "when your activity is done and should be closed". So, if you go in the if or the else if conditions your app will close automatically 6/npic.twitter.com/80smAYVyu9
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.