Home | VerSprite Resources

Remote Attack

We are passionate about helping our clients chart a course that brings security and business together.

Hacking an Aftermarket Remote Start System

Blog Post

Exploit Development

How Hackers Control & Steal Vehicles Remotely

The trend of automotive security research began in the 2010s and has resulted in the discovery of several critical security issues within modern vehicles. Hackers have repeatedly demonstrated their ability to remotely track, steal, and control a variety of unaltered vehicles.

Learn more

Airmail 3 3.5.9 for MacOS

Advisory

Airmail 3 3.5.9 for MacOS

An issue was discovered in Bloop Airmail 3 3.5.9 for MacOS. The “send” command in the airmail:// URL scheme allows an external application to send arbitrary emails from an active account. URL parameters for the “send” command with the “attachment_” prefix designate attachment parameters.

Learn more

Airmail for Mac registers and uses the airmail:// URL scheme. The "send" command in the URL scheme allows an external application to send arbitrary emails from an active account without authentication. The handler has no restriction on who can use its functionality. The handler can be invoked using any method that invokes the URL handler such as a hyperlink in an email. The user is not prompted when the handler processes the "send" command which automatically sends an attacker crafted email from the target account.

Advisory

Airmail 3 for Mac

Airmail for Mac registers and uses the airmail:// URL scheme. The “send” command in the URL scheme allows an external application to send arbitrary emails from an active account without authentication. The handler has no restriction on who can use its functionality. The handler can be invoked using any method that invokes the URL handler such as a hyperlink in an email.

Learn more

airmail3

Blog Post

Social Engineering

Phishing for Files with Airmail 3 for Mac

Airmail 3 is a sleek and featureful alternative to Apple Mail on MacOS. We chose this application as a target for reverse engineering to gain a better understanding of how MacOS applications work on a low-level.

Learn more

We are an international squad of professionals working as one.

Email

[email protected]

logos