63red is described as an app built using HTML5.
Explicit Confidence 95% · Jack Rhysider EP 49 Details
“you can just make the app in HTML 5 using JavaScript”
Software
software:63red
Android application resembling Yelp for Donald Trump supporters, whose exposed API and database permitted broad unauthenticated modification and access.
Android application resembling Yelp for Donald Trump supporters, whose exposed API and database permitted broad unauthenticated modification and access.
“This was an Android app and it was called 63red.”
“There was no authentication process so everybody has the ability to modify”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | USES | HTML5 | Explicit | 49 |
| outgoing | USES | JavaScript | Explicit | 49 |
| incoming | AFFECTS | 63red API vulnerability | Explicit | 49 |
63red is described as an app built using HTML5.
Explicit Confidence 95% · Jack Rhysider EP 49 Details
“you can just make the app in HTML 5 using JavaScript”
63red USES JavaScript
The 63red application exposed JavaScript used to create its website-like interface.
Explicit Confidence 99% · Jack Rhysider EP 49 Details
“Elliot was able to see all the JavaScript used to create this website app”
63red API vulnerability AFFECTS 63red
The 63red API vulnerability allowed unauthenticated users to modify accounts and otherwise control database contents.
Explicit Confidence 99% · Elliot Alderson EP 49 Details
“There was no authentication process so everybody has the ability to modify, to do whatever they want.”