Later archive addition

A View to a Kill: WebView Exploitation

Matthias Neugschwandtner, Martina Lindorfer and Christian Platzer

WebView lets a mobile app expose native functionality and device data to web content it loads, so an attacker who controls that content inherits the app's permissions. The paper sets out the threat scenario, works it through selected apps as case studies, and reports a scan of over 287,000 Android apps for WebView-related vulnerabilities.

Record

Researcher

Matthias Neugschwandtner, Martina Lindorfer and Christian Platzer

In the archive

• Added to the 2013 archive after the original list was published

Tags

• android
• javascript
• sandbox-escape
• privilege-escalation
• large-scale-scan
• measurement-study
• case-study
• owasp-a01-2021

This page is the archive's own catalogue record. The research is the work of Matthias Neugschwandtner, Martina Lindorfer and Christian Platzer, first published at the original source. Preserved copies are kept so the citation survives its host.