Totally Pwning the Tapplock Smart Lock (the API way)
In Summary : Tapplocks api endpoints had no security checks other than a valid token to access any data.This results in anyone with a va...
https://updatesinfosec.blogspot.com/2018/06/totally-pwning-tapplock-smart-lock-api.html
In Summary :
Tapplocks api endpoints had no security checks other than a valid token to access any data.This results in anyone with a valid login (easily obtained by creating an account) being able to manipulate every tapplock available! [...]
kindly refer the following link as follow up :
https://ift.tt/2HRSPnr
Tapplocks api endpoints had no security checks other than a valid token to access any data.This results in anyone with a valid login (easily obtained by creating an account) being able to manipulate every tapplock available! [...]
kindly refer the following link as follow up :
https://ift.tt/2HRSPnr
