Banking Dynasty: The Dozie Brothers Branch Out

https://undercodenews.com/banking-dynasty-the-dozie-brothers-branch-out/

@Undercode_News

🔐 Nestlé Faces Cyberattack: R00TK1T Claims Responsibility

https://undercodenews.com/nestle-faces-cyberattack-r00tk1t-claims-responsibility/

@Undercode_News

⚠️ #AI-Powered Deception: FIN7's Deepfake #Malware Trap

https://undercodenews.com/ai-powered-deception-fin7s-deepfake-malware-trap/

@Undercode_News

🧠 Russian Intelligence Using Children for Sabotage in Ukraine

https://undercodenews.com/russian-intelligence-using-children-for-sabotage-in-ukraine/

@Undercode_News

🚨 Hackers Exploit #YouTube Creators with Malicious Brand Deals

https://undercodenews.com/hackers-exploit-youtube-creators-with-malicious-brand-deals/

@Undercode_News

🔐 #YouTube Creators Beware: Phishing Campaign Steals Accounts to Spread Scams

https://undercodenews.com/youtube-creators-beware-phishing-campaign-steals-accounts-to-spread-scams/

@Undercode_News

🕵️ Serbian Authorities Spy on Journalists and Activists

https://undercodenews.com/serbian-authorities-spy-on-journalists-and-activists/

@Undercode_News

📱 MTN Gears Up for Full-Blown Banking in South Africa: Doubling Down on Mobile Money

https://undercodenews.com/mtn-gears-up-for-full-blown-banking-in-south-africa-doubling-down-on-mobile-money/

@Undercode_News

🚨 Serbia's #Digital Surveillance: A Threat to Civil Liberties

https://undercodenews.com/serbias-digital-surveillance-a-threat-to-civil-liberties/

@Undercode_News

🌐 Nigeria's Booming Internet: Top Providers Offering Unlimited Data

https://undercodenews.com/nigerias-booming-internet-top-providers-offering-unlimited-data/

@Undercode_News

🚨 A Stealthy Threat: The BADBOX #Malware Operation

https://undercodenews.com/a-stealthy-threat-the-badbox-malware-operation/

@Undercode_News

🛒 #Cybercrime Marketplace Rydox Seized, Administrators Arrested

https://undercodenews.com/cybercrime-marketplace-rydox-seized-administrators-arrested/

@Undercode_News

📱 Borrowing with Confidence: A Guide to FCCPC and CBN-Approved Loan Apps in Nigeria

https://undercodenews.com/borrowing-with-confidence-a-guide-to-fccpc-and-cbn-approved-loan-apps-in-nigeria/

@Undercode_News

🚨 A Dark Web Threat Looms Over the Jewelry Industry

https://undercodenews.com/a-dark-web-threat-looms-over-the-jewelry-industry/

@Undercode_News

Nigerian Comedy Reigns Supreme on #YouTube in 2022!

https://undercodenews.com/nigerian-comedy-reigns-supreme-on-youtube-in-2022/

@Undercode_News

#Vodafone Idea Brings 5G to India: A Closer Look

https://undercodenews.com/vodafone-idea-brings-5g-to-india-a-closer-look/

@Undercode_News

🦑𝐏𝐞𝐧𝐭𝐞𝐬𝐭𝐢𝐧𝐠 𝐆𝐖𝐓-𝐑𝐏𝐂 𝐀𝐩𝐩𝐬 👇

Recently I had the "honor" to pentest an app using GWT-RPC requests

GWT-RPC stands for Google Web Toolkit Remote Procedure Calls

You can think about it as an alternative to JSON, XML and forms data

So if you see something like the image below, you are dealing with GWT-RPC

----
H𝐨𝐰 𝐝𝐨 𝐰𝐞 𝐩𝐞𝐧𝐭𝐞𝐬𝐭 𝐢𝐭?

1. 𝐇𝐢𝐝𝐝𝐞𝐧 𝐅𝐮𝐧𝐜𝐭𝐢𝐨𝐧𝐬 -> using the GWTMap tool, enumerate all functions available in the obfuscated {hex} . cache . js file. If you have new functions, use the --rpc flag and send direct commands to them as there's a high chance that they are not protected

2. 𝐁𝐫𝐨𝐤𝐞𝐧 𝐀𝐜𝐜𝐞𝐬𝐬 𝐂𝐨𝐧𝐭𝐫𝐨𝐥 -> chances are developers would assume the protocol is too complicated and hard to read (i.e: it uses some obfuscation). Using two different accounts, replay the requests generated by the app using both session cookies. If it works -> Broken Access Control

3. 𝐈𝐧𝐣𝐞𝐜𝐭𝐢𝐨𝐧 -> all values that look like user controlled data in the String Table and Payload sections can (and should) be fuzzed for common injections attacks, including SQLi, command injection, SSRF, SSTI, etc. but avoid changing the indexes as this might generate an invalid GWT-RCP format

4. 𝐒𝐞𝐫𝐢𝐚𝐥𝐢𝐳𝐚𝐭𝐢𝐨𝐧 - the String Table + Payloads are used together to define and serialize the data provided through the request. Insecure deserialization attacks are an attack vector worth considering

Ref: Andrei Agape
@UndercodeCommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

⚡️ Silo Renewed for Seasons 3 and 4, Wrapping Up the Series Adaptation

https://undercodenews.com/silo-renewed-for-seasons-3-and-4-wrapping-up-the-series-adaptation/

@Undercode_News