amayra / Dumpit

An exploit for SHAREit <= v 4.0.38

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

About

DUMPit is an exploit for SHAREit mobile app abusing two recently discovered vulnerabilities affecting SHAREit Android application <= v 4.0.38. The first one allows an attacker to bypass SHAREit device authentication mechanism, and the other one enables the authenticated attacker to download arbitrary files from the user’s device. Both vulnerabilities were reported to the vendor and patches have been released.

Demo

DUMPit exploit demo

Resources

Usage

To launch the exploit server with GUI (Tested on windows,linux)

python server.py

To launch the autopwn module (Works on linux only)

python autopwn.py

Legal disclaimer

Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program.

About

An exploit for SHAREit <= v 4.0.38


Languages

Language:Python 60.0%Language:HTML 22.0%Language:JavaScript 12.5%Language:CSS 5.4%