Web Hack List

Other nomination

Using HTTP headers pollution for mobile networks attacks

Softpedia reports Bogdan Alecu's EUSecWest research on mobile operator portals. Carriers and their content partners identify subscribers by HTTP headers injected at the gateway, so adding or altering those headers lets an attacker browse the portal as any customer knowing only their phone number. Most tested operators worldwide were vulnerable, enabling purchases and account changes.

Record

Researcher
Eduard Kovacs
Published by
softpedia
Date

In the archive

Related sources

Tags

This page is the archive's own catalogue record. The research is the work of Eduard Kovacs, first published at the original source. Preserved copies are kept so the citation survives its host.