Archive

February 2019

DUMPit - The new SHAREit Vulnerability

SHAREit Multiple Vulnerabilities Enable Unrestricted Access to Adjacent Devices’ Files

Two recently discovered vulnerabilities affecting SHAREit Android application <= v 4.0.38. The first one allows attacker to bypass SHAREit device authentication mechanism, and the other one enables authenticated attacker to download arbitrary files from user's device. Both vulnerabilities were reported to the vendor and patches have been released.

Mobile Penetration Testing   •   February 25, 2019   •   17 min read
[SQLi] Extracting data without knowing columns names

[SQLi] Extracting data without knowing columns names

Extracting data without knowing columns names from MYSQL < 5 or in case of WAF blacklisting sending information_schema in the request

Web Security   •   February 9, 2019   •   7 min read