Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Public Report: Android Quick Share Application Penetration Test

netspi.com | blog | #pentesting | #android | #mobile-security | #google-pixel | #quick-share | #public-report

Summary

NetSPI's penetration test of Protocol X in Google Pixel 10 Pro's Quick Share Extension found one low-severity issue, now resolved. Read the full report.
Published
Collected

original ↗

Related coverage

blog · bishopfox.com
Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications
Bishop Fox shows how to bypass .NET MAUI's platform packaging to extract readable C# assemblies from Android and iOS apps, then use that shared-assembly insight to uncover critical vulnerability patterns in common business logic.
blog · projectzero.google
Hack The Galaxy: Hunting Bugs in the Samsung Galaxy S6 Edge
Project Zero researched the Samsung Galaxy S6 Edge and reported 11 high-impact security issues, discussing motivations, methodology and lessons learned from the device research.
blog · netspi.com
How to Streamline Pentest Data to Security Orchestration
NetSPI offers three best practices for making third-party pentest data compatible with security orchestration, since static PDF reports and custom formats hinder automated correlation and remediation.
blog · netspi.com
Bypassing SQL Server Logon Trigger Restrictions
Scott Sutherland shows how to bypass SQL Server logon trigger restrictions by spoofing hostnames and application names with lesser-known connection string properties, using SSMS and PowerUpSQL.
blog · netspi.com
Get Windows Auto Login Passwords via SQL Server with PowerUpSQL
Dumps Windows auto-login credentials through SQL Server using xp_regread and PowerUpSQL, covering post-SP4 access restrictions and useful registry reads for least-privilege logins.
blog · netspi.com
Finding Sensitive Data on Domain SQL Servers using PowerUpSQL
Demonstrates using PowerUpSQL to discover accessible domain SQL Servers and rapidly sample databases for sensitive PCI, HIPAA, and other regulated records at scale.
back