Go Back   Android Forums > Android Phones > Samsung Galaxy Attain 4G

test: Reply
 
LinkBack Thread Tools
Old September 25th, 2012, 12:29 PM   #1 (permalink)
ROM Developer
Thread Author (OP)
 
Shabbypenguin's Avatar
 
Join Date: Mar 2011
Gender: Male
Posts: 5,273
 
Device(s): Nexus 5
Carrier: Sprint

Thanks: 353
Thanked 4,947 Times in 2,039 Posts
Default PSA: Watch what sites you load

Some of you may have heard the big news, there is a bit of html code that can remotely do a factory reset on your device while browsing around without your consent or way to stop it. the website has to have it setup and has to the stock web browser. since this exploit was released into the public it is unknown on if any sites may "maliciously" add it in. i cant confirm or deny that this device may be subject to this exploit, but its for teh best that you know anyways.

the code can be viewed via a frame on a website, so some jerk posting the html code into a comment isnt gunna make the site screw your phone up. so it has to be setup to run the exploit, but since it is only a few lines im sure a few sites already have ill intentions. if anyone would like to test their device with the exploit i have a secret page setup that i have been testing my devices on. if it doesnt affect your device than ill post about it here and everyone can breathe a sign of relief.

so far it seems its only samsung devices that are affected but many more could be.

edit: Samsung prevail, Admire and teh ZTE warp are ll suseptible to the core exploit. you can test without wiping your device here

www.shabbypenguin.com/data

Advertisements
__________________
Enjoy my work?
Donate here

Know an unloved device? swing by our new forums
Shabbypenguin is online now  
Last edited by Shabbypenguin; September 25th, 2012 at 04:59 PM.
Reply With Quote
The Following 4 Users Say Thank You to Shabbypenguin For This Useful Post:
driftinanomaly (August 28th, 2013), Frozin (September 25th, 2012), MaxOmus (October 4th, 2012), Tokenpoke (October 2nd, 2012)
sponsored links
Old September 25th, 2012, 06:03 PM   #2 (permalink)
Senior Member
 
alpha0990's Avatar
 
Join Date: Nov 2011
Posts: 550
 
Device(s):
Carrier: Not Provided

Thanks: 15
Thanked 61 Times in 60 Posts
Default

/nget flash fool

Galaxy Ace

Lol
alpha0990 is offline  
Reply With Quote
Old September 25th, 2012, 06:07 PM   #3 (permalink)
Senior Member
 
alpha0990's Avatar
 
Join Date: Nov 2011
Posts: 550
 
Device(s):
Carrier: Not Provided

Thanks: 15
Thanked 61 Times in 60 Posts
Default

That was with Opera.

With the stock browser, Dialer was opened with the number: ##3282#
alpha0990 is offline  
Reply With Quote
Old September 25th, 2012, 06:45 PM   #4 (permalink)
ROM Developer
Thread Author (OP)
 
Shabbypenguin's Avatar
 
Join Date: Mar 2011
Gender: Male
Posts: 5,273
 
Device(s): Nexus 5
Carrier: Sprint

Thanks: 353
Thanked 4,947 Times in 2,039 Posts
Default

Quote:
Originally Posted by alpha0990 View Post
That was with Opera.

With the stock browser, Dialer was opened with the number: ##3282#
on the attain? it didnt enter teh debug menu?
Shabbypenguin is online now  
Reply With Quote
Old September 25th, 2012, 09:08 PM   #5 (permalink)
Senior Member
 
alpha0990's Avatar
 
Join Date: Nov 2011
Posts: 550
 
Device(s):
Carrier: Not Provided

Thanks: 15
Thanked 61 Times in 60 Posts
Default

Samsung Galaxy Ace bro. No debug menu with stock browser.

For Opera see the pic



If I click, the dialer opens
alpha0990 is offline  
Last edited by alpha0990; September 25th, 2012 at 09:24 PM.
Reply With Quote
Old September 25th, 2012, 11:34 PM   #6 (permalink)
ROM Developer
Thread Author (OP)
 
Shabbypenguin's Avatar
 
Join Date: Mar 2011
Gender: Male
Posts: 5,273
 
Device(s): Nexus 5
Carrier: Sprint

Thanks: 353
Thanked 4,947 Times in 2,039 Posts
Default

Quote:
Originally Posted by alpha0990 View Post
Samsung Galaxy Ace bro. No debug menu with stock browser.

For Opera see the pic

If I click, the dialer opens
this only works in teh stock browser. i was confused about the device you were using due to this being the attain 4g forums :P

what happens if in your dialer you dial ##3282#?

if nothing then you prolly just need a diff dialer code, isnt teh ace a gsm device?
Shabbypenguin is online now  
Reply With Quote
Old September 26th, 2012, 09:57 AM   #7 (permalink)
Senior Member
 
alpha0990's Avatar
 
Join Date: Nov 2011
Posts: 550
 
Device(s):
Carrier: Not Provided

Thanks: 15
Thanked 61 Times in 60 Posts
Default

"Connection problem or invalid MMI code"

Samsung Galaxy Ace S5830 - Full phone specifications
alpha0990 is offline  
Reply With Quote
Old October 2nd, 2012, 10:28 AM   #8 (permalink)
Junior Member
 
MaxOmus's Avatar
 
Join Date: May 2010
Posts: 70
 
Device(s): Galaxy Attain 4G Evo 4G, among others...
Carrier: Not Provided

Thanks: 6
Thanked 10 Times in 9 Posts
Default

The Attain is exploitable as well, just tested on stock browser & dolphin, both prompted the dialer.
MaxOmus is online now  
Reply With Quote
The Following User Says Thank You to MaxOmus For This Useful Post:
Tokenpoke (October 2nd, 2012)
Old October 3rd, 2012, 08:19 AM   #9 (permalink)
ROM Developer
Thread Author (OP)
 
Shabbypenguin's Avatar
 
Join Date: Mar 2011
Gender: Male
Posts: 5,273
 
Device(s): Nexus 5
Carrier: Sprint

Thanks: 353
Thanked 4,947 Times in 2,039 Posts
Default

the dialer showing up is what you want, thats a feature. what you dont wanna see is the hidden menu due to it
Shabbypenguin is online now  
Reply With Quote
Old October 3rd, 2012, 09:20 AM   #10 (permalink)
Senior Member
 
Tokenpoke's Avatar
 
Join Date: Feb 2011
Location: Miami, FL
Gender: Male
Posts: 3,065
 
Device(s): sgsIII, pure stock samsung galaxy tab 2 7.0 dualbooting stock and pacrom Lg F6 rooted SgS3 4.3 ro
Carrier: MetroPCS

Thanks: 299
Thanked 1,113 Times in 607 Posts
Secondgenmonkey@gmail.com
Default

Nice to have ya back shabbs
__________________
looking for local miami music? in a miami band and want free promo and show tips, no strings attached? www.facebook.com/hahopromotions show updates, music news and free stuff!!! i help here for free, so i figured i can do this too!!! enjoy!
Tokenpoke is offline  
Reply With Quote
sponsored links
Old October 4th, 2012, 11:40 AM   #11 (permalink)
Junior Member
 
MaxOmus's Avatar
 
Join Date: May 2010
Posts: 70
 
Device(s): Galaxy Attain 4G Evo 4G, among others...
Carrier: Not Provided

Thanks: 6
Thanked 10 Times in 9 Posts
Notsure Attain

Quote:
Originally Posted by Shabbypenguin View Post
the dialer showing up is what you want, thats a feature. what you dont wanna see is the hidden menu due to it
Ok, Check this out... Just to confirm Ill post a couple screens below showing what occurred when I went to your link w/ the stock browser:

(Ignore the AirDroid toast, it's unrelated. I was using it for the screens)



After I clicked on the dialer it took me here:

MaxOmus is online now  
Reply With Quote
Reply


Go Back   Android Forums > Android Phones > Samsung Galaxy Attain 4G
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -5. The time now is 01:26 AM.
Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.