POJIA破甲
地图 / Brave Shield for iOS is weak against IDN homograph attacks

Brave Shield for iOS is weak against IDN homograph attacks

其他弱点 / 钓鱼 / #1819329

厂商
Brave Software
严重程度
低危
赏金
—
弱点
钓鱼
研究员
@nishimunea
披露日期
2023-06-22
资产
https://github.com/brave/brave-ios
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(761 字符中的一小部分)
In most parts of Brave for iOS, including the address bar, protection against IDN attacks are implemented. However, Brave Shield has no countermeasures. For example, when you visit https://www.xn--80ak6aa92e.com , Brave Shield panel in the address bar shows the domain of this site is "apple.com". …

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Brave Software 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @nishimunea · 版权归作者与 Brave Software 所有

同类报告

URL link spoofingSlack · 2020-04-26 · $250Github Account hijack through broken link in developer.twitter.comX / xAI · 2021-02-04Subdomain Takeover on demo.greenhouse.io pointing to unbouncepagesGreenhouse.io · 2020-03-05Domain Takeover [3737signals.com]Basecamp · 2021-08-13Login CSRF : Login Authentication Flaw on https://liberapay.com/Liberapay · 2021-04-05account impersonate through broken linkQIWI · —