Profile picture
Elliot Alderson
@fs0c131y
, 15 tweets, 5 min read Read on Twitter
With more than 100,000,000 downloads ES File Explorer is one of the most famous #Android file manager.
The surprise is: if you opened the app at least once, anyone connected to the same local network can remotely get a file from your phone
Technically, everytime a user is launching the app, a HTTP server is started. This server is opening locally the port 59777. On this port, an attacker can send a JSON payload to the target
You can find the proof of concept on this Github repo github.com/fs0c131y/ESFil…
To sum up, an attacker connected on the same local network can remotely:
- get a file from your phone
- list all the apps installed on your phone
- list all your videos, images, audio files
Worth to say, I'm convinced this "feature" has been implemented by design. Imagine a scenario: I'm Chinese, I have ES File Explorer installed on my phone. I'm on the subway and I used to connect to the public wifi. "The authorities" can use this "feature" against me.
As always, excellent article by @zackwhittaker techcrunch.com/2019/01/16/and…
I did a commit to fix a small issue on my script. If you have a problem with the script or have some improvements don't hesitate to contact me or to send a pull request! github.com/fs0c131y/ESFil…
I love the #infosec community! The awesome @LukasStefanko found that ES File Explorer is vulnerable to a MITM attack 😅
Did I tell you that I found 2 others vulnerabilities in ES File Explorer? But I will keep them for another day
I'm a mysterious security researcher 😂
Now, you can call this vulnerability CVE-2019-6447
You are awesome! I already merged 4 pull requests. Thank you all for your contribution and show me how bad I am in Python 😁 github.com/fs0c131y/ESFil…
Missing some Tweet in this thread?
You can try to force a refresh.

Like this thread? Get email updates or save it to PDF!

Subscribe to Elliot Alderson
Profile picture

Get real-time email alerts when new unrolls (>4 tweets) are available from this author!

This content may be removed anytime!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

how to unroll video

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!

Related hashtags

#Android #infosec

More from @fs0c131y see all

Profile picture
Elliot Alderson
@fs0c131y
Je sens que je vais me faire plaisir 😏
It’s a Cordova app, as always in this case, the interesting stuff are probably located on their backend.
Read 4 tweets
Profile picture
Elliot Alderson
@fs0c131y
Time for fun! The @WordPress plugin known as Social Network Tabs, made by Design Chemical, combines all of your favorite social networks profiles. Due to their poor coding skills I was able to take over 127 Twitter accounts #0day #infosec github.com/fs0c131y/CVE-2…
This is caused by the following lines of code within the page where the Twitter widget is displayed. Yes, they leak the Twitter access_token, access_token_secret, consumer_key and consumer_secret of their user
Thanks to @publicww, with the following search queries, I managed to retrieve the Twitter access_token, access_token_secret, consumer_key and consumer_secret from 539 vulnerable websites
Read 15 tweets
Profile picture
Elliot Alderson
@fs0c131y
My Twitter after 1 night 😁
Not bad 😀
Thank you all for your comments, retweets and private messages! I'm trying to read everything and to answer as much as I can
Read 4 tweets

Related threads

Profile picture
🎄MAKE🎁 THE🕯️ YULETIDE 🌈GAY☃️
@alexandraerin
One of the weird highlights of my year was this weekend when I went to see Mary Poppins Returns at @Leitersburg Cinemas (our thriving local independent movie theater), and someone looked at me and said, "Don't you have a famous Twitter account?"
It's probably not the first time I've been recognized but it's hard to tell if people are just noticing me because I'm distinctive and/or they've seen me around town or if they actually know me from the internet when they don't mention it.
The theater operation has changed hands a few times but it's the same people still owning the property and the new owners have always kept the theater running. They look like a real going concern, at least from the outside.

Read 4 tweets
Profile picture
Kurt Eichenwald
@kurteichenwald
1. I’ve always thought impeachment demands before Mueller report were just politics. No more. Trump is committing felonies before our eyes. Witness tampering, obstruction, it is all there. No surprise our president and a mafia chieftain are both called “Don.” They are the same...
2...trump is now praising people who refuse to cooperate with Mueller - and instead are willing to be indicted - and attacks people who cooperate. He dangles the prospect of pardons to the noncooperators, and demands lengthy prison terms for the cooperators....
3...he praises Manafort as an innocent babe when he was CONVICTED by a jury. Trump spits on every element of the justice system: attacking prosecutors, attacking witnesses, attacking everyone who doesn’t kneel before him. Yet he argues that black boys cleared through DNA are...
Read 5 tweets
Profile picture
Steven Sinofsky
@stevesi
“I Know the Salaries of Thousands of Tech Employees” by @jackiehluo link.medium.com/ve2ucnEphR // I really like this post and effort. Some thoughts on the challenges of operationalizing compensation for many people, especially over time. #transparency 1/🧵
2/ Post rightly focuses on first order, which is disparity of compensation on identifiers and systemic bias. I agree 1000% with that focus.

Operationalizing a system is hard. I wanted to highlight challenges—not excuses (!) but provide tools/motivation for gaining transparency. Excerpt from post “Today gender, race, and class…”
3/ The most frustrating thing as an employee is finding out the compensation of another employee and believing there is unfairness in the ‘system’, whether you are paid more or less, something seems broken.
Read 26 tweets
Profile picture
Foreign Office 🇬🇧
@foreignoffice
THREAD

The attempted hacking of the Organisation for the Prohibition of Chemical Weapons (OPCW) by the Russian Military Intelligence Service - the GRU - part of a sustained pattern of hostile cyberspace activity.

What we know ⬇️
The attempted hacking happened in April. Around that time, the OPCW was working to independently verify the UK’s analysis of the chemical used in the poisoning of the Skripals in Salisbury. The OPCW confirmed the UK’s analysis.
This operation in The Hague by the GRU was not an isolated act. The Unit involved, known in the Russian military as Unit 26165, has sent officers around the world to conduct brazen close access cyber operations.
Read 19 tweets
Profile picture
Dr. Jack Brown
@DrGJackBrown
THREAD: Body Language Analysis No. 4316: Sarah Paulson, The Met Gala, and Madonna - #Nonverbal & #EmotionalIntelligence • • #SarahPaulson #Madonna #MetGala #MetGala2018 #Surprise #BodyLanguage #BodyLanguageExpert
1/ Sarah Paulson was recently a guest on The Graham Norton Show promoting Ocean's Eight - a film in which she co-stars. In the video above, Ms. Paulson recounted The 2018 Met Gala - where she was upstaged by Madonna.
2/ This image was captured at the moment when Ms. Paulson realized the reason no one was paying her any attention was because Madonna was standing nearby.
Read 13 tweets
Profile picture
Burt Likko
@burtlikko
Surprise #1 -- the decision was announced today, and not on the last Monday of the term.

Not A Surprise #1 -- the majority opinion was authored by Kennedy.
Surprise #2 -- it wasn't a 5-4 opinion.

Not A Surprise #2 -- Thomas wrote separately to say "Y'all got the law right but the law is fndamentally wrong."
Surprise #3 -- Breyer and Kagan joining the majority.

Not A Surprise #3 -- Ginsburg dissents.
Read 41 tweets

Trending hashtags

#eveningstandard #financialtimes #Middlesex #smartcitiea #manchester #opendara #5G #ProBono #JohnLewisandPartners #worldbuilding #smarticities #investors #disclosure #harassment #AdeccoUK #edinburgh #InsuranceNews #Asda #businessnews #VoteLeaveBrokeTheLaw #channel4news #connected #ScotlandYard #champsélysées #Surprise
Follow Us on Twitter!

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just three indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3.00/month or $30.00/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!