eXploit

Inspiration

We built this site in an attempt to display some serious privacy leaks that are found in some applications, that hackers can access, and is potentially dangerous to the general public.

What it does

It displays the apps that we tested, their flaws and privacy issues. It also contains our methodology behind testing the applications.

How I built it

The website was built using basic web development skills; HTML, CSS, and JavaScript. To test the android applications, we backed up the apk files, and converted them to .tar files and then analyzed the xml documents for sensitive, unencrypted user information.

Challenges I ran into

Setting up the testing process was difficult. Getting the right commands on the different mediums was difficult.

Accomplishments that I'm proud of

Testing the applications, and understanding which essential apps come short in terms of privacy.

What I learned

Web development skills, as well as working with application apk files.

What's next for eXploit

We hope to move forward and attempt the man-in-the-middle hack, and test the applications for privacy issues during communication with the server (e.g. purchasing items).