Sean Pesce

IoT & Android Hacker | OSCP |

[Sean Pesce @SeanPesce]

@ozeniken @archiveis IIRC this is due to some archaic rules around classified data, and/or bringing data into classified spaces (e.g., SCIFs)

[Sean Pesce @SeanPesce]

Just rediscovered this Smali bind shell I wrote a while back. Useful for niche scenarios like minimal exploit PoCs (i.e., overwriting DEX files for arbitrary execution). IIRC it compiles to a few hundred bytes.

https://t.co/yRLeaop1E3

#android #mobilesecurity

[Sean Pesce @SeanPesce]

@rebane2001 @NotionHQ I've long thought there should be an option to retain history on 0-second meta redirects TBH

[Sean Pesce @SeanPesce]

@Muntrive @FirewallFiasco @Hacker0x01 One-click ATO is absolutely a vulnerability, and often considered high-severity. Anyone saying otherwise is objectively incorrect.

Consider also that many XSS and CSRF attacks require a click, and they don't always guarantee something as impactful as ATO.

[Sean Pesce @SeanPesce]

@fr4vian Yeah it's basically impossible unless you have a generous triager - I've found several one-click RCEs and all were rated "high"

[Sean Pesce @SeanPesce]

@skcd42 @charliermarsh Yeah I believe this is just a general browser quirk, your highlighted selection is lost when the DOM is updated

[Sean Pesce @SeanPesce]

@S1r1u5_ Not Chrome, but this one was a cool approach to finding issues in Android permissions logic

https://t.co/3goONAxU5T

[Sean Pesce @SeanPesce]

@Ch0pin Also, excessive use of the "not interested in this post" button

[Sean Pesce @SeanPesce]

@Ch0pin Nice! Definitely an under-researched topic

[Yt4gg3r @yt4gg3r]

https://t.co/ArTDbFMAKk

[Sean Pesce @SeanPesce]

Great blog post from @payatulabs: Understanding and Modifying the Hermes Bytecode

https://t.co/TOSl5ekwDX

[Sean Pesce @SeanPesce]

@vasyaqwee @tdinh_me VS Code: right-click -> "format document," and when you copy/paste from it, it retains your (theme-specific) syntax highlighting

[Sean Pesce @SeanPesce]

@MishaalRahman Actually, I've seen quite a few devices with security policies that let you install/sideload apps, but not enable developer options - this would still be a use-case for Termux

[Sean Pesce @SeanPesce]

@MishaalRahman Wow, sounds like we might not need Termux anymore

[d4d @zakfedotkin]

We've just updated our URL Validation Bypass Cheat Sheet with a new IP address obfuscator by @e1abrador, and new payloads by @SeanPesce and @t0xodile. Check out the full details at: https://t.co/vX3DHRg9Zr

[Sean Pesce @SeanPesce]

This is just a small sample from that list

[Sean Pesce @SeanPesce]

Arc browser (on Android, at least) seems to block ads and annoyances by injecting a <style> element on every page you visit - it applies this style by using a giant list of more than 12,000 CSS selectors for common nuisance DOM elements

[Sean Pesce @SeanPesce]

Exploiting Android Client WebViews with Help from HSTS

https://t.co/3gP6pVV8rM