Elliot Alderson
@fs0c131y
French security researcher. Worst nightmare of Oneplus, Wiko, UIDAI, Kimbho, Donald Daters and others. Not completely schizophrenic. Not related to USANetwork.
Tweets
- Tweets, current page.
- Tweets & replies
- Media
You blocked @fs0c131y
Are you sure you want to view these Tweets? Viewing Tweets won't unblock @fs0c131y
- Pinned Tweet
It’s time to publish the details of the biggest
#DataLeak I had to deal with.@IndianOilcl leaked#Aadhaar numbers: 6,700,000 Aadhaar numbershttps://link.medium.com/4HEQ80c3pUShow this threadThanks. Twitter will use this to make your timeline better. UndoUndo - Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Their AzimovWebview is able to open a lot of files
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo -
This is useless but it’s funny. Me, using the RSA conference app to go on Twitterpic.twitter.com/sGgoWiNFc7
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo -
I am interested to know if this password is the same for everybody
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo -
I created my account today, it seems to be an incremental number
pic.twitter.com/5QGrJrrMyK
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo -
The password of the user_data_crypt.db is quite long, encoded with Base64. This is the tables available in the databasepic.twitter.com/mXNXx6umLX
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo -
The databases folder contains 2 interesting databases: "persistentstorage.db" and "user_data_crypt.db". What do we have in user_data_crypt
?pic.twitter.com/GzrrGugZuE
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo -
The rsa2019.sqlite_1 is a sqlite3 database which contains all the useful info regarding the eventpic.twitter.com/zUp0sYM7AB
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo -
The sharedPreferences files called prefsGlobal.xml contains a lot of juicy infopic.twitter.com/rD8Q21u1hX
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo - Thanks. Twitter will use this to make your timeline better. UndoUndo
-
This key is used to generate the HMAC key. It is used after the download of the attendance db. This is something we should hook this method during the dynamic analysispic.twitter.com/Q8DaROiFyE
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo - Thanks. Twitter will use this to make your timeline better. UndoUndo
- Thanks. Twitter will use this to make your timeline better. UndoUndo
- Thanks. Twitter will use this to make your timeline better. UndoUndo
- Thanks. Twitter will use this to make your timeline better. UndoUndo
-
This is a dead end. The CustomTabMainActivity is checking the action and finish the activity if the action is equals to CustomTabActivity.a which is our case here. Next!pic.twitter.com/bxHTW6GksK
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo -
This CustomTabActivity is taking the data string and forward it to another app. By sending "adb shell am start -n "com.rsa.rsaconference/com.facebook.CustomTabActivity" -d "https://google.com "" the app is blinking twicepic.twitter.com/Cmca1drPNB
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo -
A good thing is to check the word exported="true" in the AndroidManifest.xml. For example, if you send adb shell am start -n "com.rsa.rsaconference/com.facebook.CustomTabActivity", the RSA Conference app will open a blank screen
pic.twitter.com/e6b2idBwjb
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo - Thanks. Twitter will use this to make your timeline better. UndoUndo
-
- In the values folder, check the strings.xml and search "secret" for example. We have a lot of results. Let's keep it on a side note for a later usepic.twitter.com/HsR59k8RyT
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo
?
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.