Name: LeapFrog Children’s Tablet Vulnerable to Hacking
Uploaded: 2019-08-06
Duration: 2 min 45 s
Description: Security company Checkmarx reveals the flaws.

Welcome to the video to demonstrate the man in the middle attack on the bed. So we start Wi Fi bumpkin destroy is good to create a rogue access points. In pump in proxy, we already have small modification let's call it a plugin That will exchange the original request to our rogue access points. Active monitor will see some requests after we start the Wi Fi campaign. As you can see In a few seconds we can already see the request being made by the lead path and it's just a window and let's move on to lead path. [ BLANK_AUDIO ] Okay so we would try. To taking the leap search application, which is default on installation only bet. Immediately our request is being changed. So we will tell the user that the account is locked in to unlock it. You need to click it. [ BLANK_AUDIO ] In this process we already gathering information from JSON files that gather the original credit card from the user, also if you click any of the links presented it would show you that the account is locked. And it requests the six digit missing numbers. So we'll try one, two, three, four, five, six and we click unlock it [ BLANK_AUDIO ] So, now the original and missing numbers from the JSON request from Leapfrog is being sent to our tech server, and the user is redirected to the original page. But we already can see on the background what's going on, so let's move on to our [ UNKNOWN ] [ BLANK_AUDIO ] We can close or minimise this window and check what's going on our log file. We download the the cc. _log file, and we check the content of it, which should be the number that we gathered. So that's it. Game over.

LeapFrog Children’s Tablet Vulnerable to Hacking

Security company Checkmarx reveals the flaws.