Mobile Penetration Testing

DUMPit - The new SHAREit Vulnerability

SHAREit Multiple Vulnerabilities Enable Unrestricted Access to Adjacent Devices’ Files

Two recently discovered vulnerabilities affecting SHAREit Android application <= v 4.0.38. The first one allows attacker to bypass SHAREit device authentication mechanism, and the other one enables authenticated attacker to download arbitrary files from user's device. Both vulnerabilities were reported to the vendor and patches have been released.

Mobile Penetration Testing   •   February 25, 2019   •   17 min read