Home | VerSprite Resources

Android Vulnerabilities and Exploits

We are passionate about helping our clients chart a course that brings security and business together.

foxit-mobile-pdf-for-android

Advisory

Android Vulnerabilities and Exploits

Foxit MobilePDF for Android

The Foxit MobilePDF for Android suffers from a path traversal vulnerability in its WiFi Transfer feature.
An attacker can use escape characters in URI(s) that are processed by the WiFI Transfer feature in order to access files in the application’s data directory.

Learn more

Dolphin-Browser-for-Android

Advisory

Android Vulnerabilities and Exploits

Dolphin Browser for Android

The Dolphin Browser for Android 12.0.2 suffers from an insecure parsing implementation of the Intent URI scheme. This vulnerability could allow attackers to abuse this implementation through a malicious Intent URI, in order to invoke private Activities within the Dolphin Browser.

Learn more

exploiting dolphin browser

Blog Post

Exploit Development

Exploiting the Dolphin Browser for Android’s Backup & Restore Feature

In this blog post, we will cover the vulnerability’s technical details on exploiting the Dolphin Browser for Android’s Backup and Restore feature.

Learn more

frida engage

Blog Post

Reverse Engineering

Shellcoding an Arm64 In-Memory Reverse TCP Shell with Frida

In part two of the series we are going to explore and leverage Frida’s new Arm64Writer API to build an in-memory reverse TCP shell.

Learn more

article featured image frida engage

Blog Post

Frida Engage Part One | Building an ELF Parser with Frida

In this blog series we will be covering the endless possibilities and power of Frida. For those of you who have never heard of Frida…

Learn more

android titan sms trojan

Blog Post

Android Vulnerabilities and Exploits

Android Titan SMS Trojan Analysis | Part One

As the title states, the Android Titan SMS Trojan utilizes Trojan functionality in order to steal SMS and exfiltrate them off of the target user’s device.

Learn more

Mercury Browser

Blog Post

Security Vulnerabilities

Multiple Vulnerabilities in Mercury Browser for Android Version 2.2.2 & 3.0.0

An insecure implementation of the intent URL scheme revolves around theIntent.parseUri() method. The first thing we did when reversing the Mercury Browser..

Learn more

Android InfoStealer Godwon

Blog Post

Android Vulnerabilities and Exploits

Android InfoStealer – Godwon – Analysis

From the description on contagio mobile this Android InfoStealer malware, Godwon, is used by an online criminal group for ‘sextortion’.

Learn more

Android Emulator Detection

Blog Post

Android Vulnerabilities and Exploits

Android Emulator Detection

The two techniques we will leverage in Android emulator detection are the use of runtime execution, and Java reflection.

Learn more

We are an international squad of professionals working as one.

Email

sales@versprite.com

logos