WebView is a widely used Android component and with the method addJavascriptInterface, native applications can interact with web pages. This is a powerful feature, but also presents some security risks like CVE-2012-6336 and App Clone Attack. Now it comes again.We have discovered a novel class of Android WebView vulnerabilities associated with JavascriptInterface, which can bypass ALL verifications.During this talk, we will disclose a NEW attack model for the first time....
By:
Ce Qin
Full Abstract & Presentation Materials:
https://www.blackhat.com/asia-21/brie...
On this page of the site you can watch the video online The Tangled Webview ----- Javascriptinterface Once More with a duration of hours minute second in good quality, which was uploaded by the user Black Hat 01 September 2021, share the link with friends and acquaintances, this video has already been watched 1,330 times on youtube and it was liked by 21 viewers. Enjoy your viewing!