Hard_Kept_Secrets
Misc
No technique tags yet.
syyntax mobile app android @syyntax
Created By: @syyntax De Monne Financial has had several security incidents revolving around the latest version of their Android mobile application. Sensitive user data is being compromised left and right. De Monne is unsure how DEADFACE has access to their API. It's too early to tell if they compromised a password -let's first check if there are any hardcoded secrets in the app.
Your task is to recover the internal API token from the APK. Submit the token as the flag. Example: deadface{2GFEwQvPVIMLJmjGYHgKFWkmpuhrjEnSewMrFRyVMEQ=}
Writeups
Official
No official writeup linked.
Community
No community writeups yet. Solved it? Share how.
Log in to add a community writeup.