Hunting Vulnerabilities of gRPC Protocol Armed Mobile/IoT Applications
summary
Claims an almost fully automated pipeline that finds gRPC flaws in mobile/IoT apps by combining static and dynamic work: IDA Python recursive analysis to extract gRPC methods and protobuf fields, a hooked dynamic library to intercept and replay traffic, and a gRPC replay gateway plus Python scheduler for distributed fuzzing. Reports finding dozens of vulnerabilities per month, shows an auth bypass that exposes and lets attackers modify other users’ records, SSRF via resource URL replacement, a single cycle-injection hit from tens of thousands of interfaces, and a log-deserialization RCE; watchdogs keep replay agents alive.
AI-written summary · about
chapters (16)
- 0:00Introduction to gRPC
- 1:37gRPC security challenges
- 2:54Automated vulnerability mining
- 4:25Reverse engineering techniques
- 6:46Intercepting gRPC requests
- 8:56Building a testing gateway
- 11:30Data acquisition and analysis
- 14:16Executing vulnerability tests
- 17:09Authority bypass case study
- 18:04SSRF vulnerability analysis
- 20:28Cycle injection exploitation
- 22:40File compression vulnerability
- 23:38Log server RCE vulnerability
- 25:13Live demo and recap
- 30:51Security defense methods
- 32:42Conclusion
related talks
21mDeep Diving Into gRPC Security: A Case Study on API Security... - Dana White & Austin Pearigen
39mDilemma in IoT Access Control: Revealing Novel Attacks and Design Challenges in Mobile-as-a-Gateway
31mFollow the Trace: How Traditional AppSec Tools Have Failed Us
50mAPI Abuse through Mobile Apps: New Attacks, New Defenses
30mAPI Security - Divide & Conquer
45mAutomatic Discovery of Evasion Vulnerabilities Using Targeted Protocol Fuzzing
39mThe API Assessment Primer
24mMobile - Your API Security Blindspot