Patching Loopholes: Finding Backdoors in Applications
summary
Binary analysis with IDA and runtime debugging finds a hidden maintenance backdoor: a startup keypress triggers an answer password flow that computes a six‑char password from a constant seed and current week, then opens a console that executes stored procedures and raw SQL with no access control, exposing login IDs, phone numbers and session data. Mobile analysis of an App Store password manager finds a fixed bypass string star hex u6 hex star that flips the "k_password_on" flag and reveals stored master passwords.
AI-written summary · about
chapters (3)
related talks
41m7 Deadly Sins: Unlock the Gates of Mobile Hacking Heaven
42mHack My App: Learn Flutter Security by Breaking It
01h 07mHow to attack (and secure) an Android app: an introduction
01h 01mHow to Break AI Systems (Before Someone Else Does)
01h 06mBackdoors in Back Doors
54mUnwrapping the Truth: Analysis of Mobile Application Wrapping Solutions
53mAre your secrets secure? How mobile applications are leaking millions of credentials
53mHow hacking works - Web edition