BTC $68279.0927
ETH $3629.5433
BNB $418.8260
SOL $133.0943
XRP $0.6497
stETH $3620.7348
ADA $0.7707
DOGE $0.1827
AVAX $43.0376
DOT $9.8988
wstETH $4204.4051
TRX $0.1402
LINK $20.4333
WETH $3627.8562
MATIC $1.1461
WBTC $68015.7231
UNI $12.3628
BCH $469.5171
LTC $88.8112
IMX $3.1360
ICP $13.3800
CAKE $3.3523
ETC $35.9657
FIL $10.0244
LEO $4.8744
ATOM $12.4782
TON $2.7811
HBAR $0.1174
RNDR $7.3750
KAS $0.1614
INJ $40.6866
DAI $0.9990
OKB $56.8390
VET $0.0495
PEPE $0.0000
XLM $0.1458
FDUSD $0.9965
STX $3.0333
XMR $148.4317
WEMIX $2.7041
LDO $3.2821
NEAR $4.3354
GRT $0.3080
ARB $1.9787
THETA $2.3471
APEX $2.6824
BSV $115.5449
BTC $68279.0927
ETH $3629.5433
BNB $418.8260
SOL $133.0943
XRP $0.6497
stETH $3620.7348
ADA $0.7707
DOGE $0.1827
AVAX $43.0376
DOT $9.8988
wstETH $4204.4051
TRX $0.1402
LINK $20.4333
WETH $3627.8562
MATIC $1.1461
WBTC $68015.7231
UNI $12.3628
BCH $469.5171
LTC $88.8112
IMX $3.1360
ICP $13.3800
CAKE $3.3523
ETC $35.9657
FIL $10.0244
LEO $4.8744
ATOM $12.4782
TON $2.7811
HBAR $0.1174
RNDR $7.3750
KAS $0.1614
INJ $40.6866
DAI $0.9990
OKB $56.8390
VET $0.0495
PEPE $0.0000
XLM $0.1458
FDUSD $0.9965
STX $3.0333
XMR $148.4317
WEMIX $2.7041
LDO $3.2821
NEAR $4.3354
GRT $0.3080
ARB $1.9787
THETA $2.3471
APEX $2.6824
BSV $115.5449
  • Catalog
  • Blog
  • Tor Relay
  • Jabber
  • One-Time notes
  • Temp Email
  • What is TOR?
  • We are in tor
  • Bug in Hyundai and Genesis cars allows complete takeover


    The discovered vulnerability affects the mobile applications of Hyundai and its luxury brand Genesis, which owners use to track the status of their cars, schedule maintenance, unlock doors and start the engine. According to Sam Curry, the hacker and bug hunter who discovered the vulnerability, the mobile apps for Hyundai and Genesis vehicles only provide functionality to authorized users. However, Sam and his team found that the server did not require users to verify their email address. In addition, it turned out that authorization can be bypassed by adding CRLF characters to the end of the victim's address during the creation of a new account. Thus, it is possible to create a new account in the application with an already existing email address.

    The new account was given a JSON web token (JWT) that matches the real email address, allowing the hacker to access the victim's app account and then the car.

    To test the exploit, the researchers ran an experiment on one of their vehicles. And it worked - Sam's team was able to unlock the car using a new account linked to the victim's modified email address.

    The researchers even wrote a Python script that allows them to take control of a car, requiring only the victim's email address from a potential car thief.

    But there is also good news. The researchers reported the vulnerability to Hyundai, and according to Curry, it has been patched.

    Author DeepWeb
    Liquid ecstasy
    LastPass has again become a victim of hackers

    Comments 0

    Add comment