PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Web Hackers vs. The Auto Industry: Critical Vulnerabilities in Ferrari, BMW, Rolls Royce, Porsche, and More

samcurry.net | blog | #bug-bounty | #account-takeover | #api-security | #car-hacking | #automotive-security | #vin | #mercedes-benz
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Sam Curry's team found automotive API flaws across brands: VIN numbers sufficed for remote commands and account takeover at Kia, Honda and Nissan, while Mercedes-Benz SSO exposed internal systems.
Published
Collected

Related coverage

blog · samcurry.net
Hacking Subaru: Tracking and Controlling Cars via the STARLINK Admin Panel
A flaw in Subaru's STARLINK admin panel gave unrestricted access to vehicles and accounts in the US, Canada and Japan—remote commands, a year of location history, PII—keyed on a last name and ZIP.
blog · samcurry.net
Hacking Kia: Remotely Controlling Cars With Just a License Plate
Kia vulnerabilities let attackers remotely unlock, start and track any hardware-equipped vehicle with a license plate—~30 seconds, subscription or not—and add themselves as invisible second users.
blog · samcurry.net
Hacking Chess.com and Accessing 50 Million Customer Records
Sam Curry recounts hacking Chess.com's mobile API: signed requests to api.chess.com seemed untamperable, until a flaw in how signatures were verified led to full takeover of any user account.
blog · bugcrowd.com
Big Bugs Podcast Episode 1: Auto Bugs – Critical Vulns found in Cars with Jason Haddix
Bugcrowd's first Big Bugs podcast episode, hosted by Jason Haddix, introduces car hacking with case studies from Tesla research to Samy Kamkar's Ownstar, plus key testing resources.
research · bugcrowd.com
The First-Ever Car Hacking Event of Its Kind: #bcbugbash Louisville
Recap of Bugcrowd's two-day Car Hacking Bug Bash in Louisville: elite hardware, RF and web hackers found multiple P1 bugs on physical cars on site, with several payouts exceeding $15,000.
blog · samcurry.net
Hacking Starbucks and Accessing Nearly 100 Million Customer Records
A Starbucks gift-card purchase tipped Sam Curry to suspicious /bff/proxy/ API calls; probing the backend-for-frontend routing ultimately exposed nearly 100 million customer records.
Back