Twitter | Search | |
Elliot Alderson
THREAD: I'm looking at a Huawei P20 from China, let see what can I found
Reply Retweet Like More
Elliot Alderson Oct 13
Replying to @fs0c131y
The 1st app I reversed is an app called Decision
Reply Retweet Like
Elliot Alderson Oct 13
Replying to @fs0c131y
Look at the name of the files contains in the assets folder: - airport_china.txt - city_china.txt - cityinfo.db - parkinglot_china.txt - railwayinfo.db - trainInfo.db - trainstation.db Interesting, no?
Reply Retweet Like
Elliot Alderson Oct 13
Replying to @fs0c131y
For example, the trainstation database contains: - address - name - latitude - longitude - city
Reply Retweet Like
Maun Hoon Main Oct 13
Replying to @fs0c131y
You probably got a used phone.
Reply Retweet Like
Elliot Alderson Oct 13
Replying to @fs0c131y
In the manifest of this application, there is a GeoReceiver
Reply Retweet Like
Elliot Alderson Oct 13
Replying to @mainhoonmaun
I did a factory reset first
Reply Retweet Like
Elliot Alderson Oct 13
Replying to @fs0c131y
This receiver is receiving an UUID and will lookup an known fence id
Reply Retweet Like
Elliot Alderson Oct 13
Replying to @fs0c131y
I'm a stupid security researcher. For the moment, the keywords are: train, airport, city, geo fence... Do you see where we are going?
Reply Retweet Like
Tigzy 🇨🇵 Oct 13
Replying to @fs0c131y
I don't think there's anything wrong with this...??
Reply Retweet Like
Hadaria Kajima / Хадариа Кайима Oct 13
Replying to @fs0c131y
Je sens qu'on va se marrer deux minutes XD
Reply Retweet Like
Elliot Alderson Oct 13
Replying to @fs0c131y
In the data folder, there is a file called CalcMain. Here some of the methods of this class: - callGetBusTime - callGetTaxiTime - isTrafficBusy - callGetHomeCity - callHasHotelTicket - callGetAirportMultiPoi - callHasGroupBuyingTicket - ...
Reply Retweet Like
Elliot Alderson Oct 13
Replying to @fs0c131y
Nice data types haha
Reply Retweet Like
Elliot Alderson Oct 13
Replying to @fs0c131y
To be clear, this app is composed of 3 background services and 2 services. There is NO UI in this app.
Reply Retweet Like
Joël Didier Oct 13
Replying to @fs0c131y
(just a dumb hypothesis)
Reply Retweet Like
Elliot Alderson Oct 13
Replying to @fs0c131y
Please be nice "DO NOT KILL ME >_<"
Reply Retweet Like
Elliot Alderson Oct 13
Replying to @fs0c131y
This is the kind of function that I love to find
Reply Retweet Like
Elliot Alderson Oct 13
Replying to @TigzyRK
Think twice :D
Reply Retweet Like
Elliot Alderson Oct 13
Replying to @HadariaKajima
Voir 2 heures ^^
Reply Retweet Like
Elliot Alderson Oct 13
Replying to @Studisys
Maybe, maybe not 🤷‍♂️
Reply Retweet Like