MODULE

Android Browser "Open in New Tab" Cookie Theft

Try Surface Command Get a continuous 360° view of your attack surface
Back to Search

Android Browser "Open in New Tab" Cookie Theft

Created
05/30/2018

Description

In Android's stock AOSP Browser application and WebView component, the "open in new tab" functionality allows a file URL to be opened. On versions of Android before 4.4, the path to the sqlite cookie database could be specified. By saving a cookie containing a