XARA Attack Demos


Password Stealing (Keychain)
    Demo here for stealing iCloud token from "Internet Accounts".
    Demo here for stealing passwords from Google Chrome browser.

Container Cracking
    Demo here for BID attack against Evernote app, stealing private notes of the Evernote user.

IPC Interception
    Demo here for Websocket attack against 1Password app, stealing all passwords used in Chrome browser.
    Demo here for port hijacking attack against Pushbullet app, stealing Pushbullet authentication token.

Scheme Hijacking
    Demo here for iOS scheme hijacking, stealing Pinterest authentication token.
    Demo here for OS X scheme hijacking, stealing Wunderlist authentication token.
    Demo here for OS X scheme hijacking, phishing for OS X user credentials.