UCä¯ÀÀÆ÷ÖÐÑëÈ˹¥»÷(MITM)·ì϶°²È«¹«¸æ
°ä²¼¹¦·ò 2019-03-28·ì϶±àºÅºÍ¼¶±ð
CVE±àºÅ£ºÔÝÎÞ£¬£¬£¬£¬£¬£¬£¬£¬Î£ÏÕ¼¶±ð£º¸ßΣ£¬£¬£¬£¬£¬£¬£¬£¬ CVSS·ÖÖµ£º¹Ù·½Î´ÆÀ¶¨
Ó°ÏìÁìÓò
ÊÜÓ°Ïì°æ±¾£º
ĿǰUCä¯ÀÀÆ÷Ų×ÅÊÖ»ú°æÒÔ¼°×ÀÃæ°æ¾ùÊÜÓ°Ïì¡£¡£¡£¡£¡£¡£
·ì϶¸ÅÊö
×Ô2016ÄêÒÔÀ´£¬£¬£¬£¬£¬£¬£¬£¬UCä¯ÀÀÆ÷ÖгöÏÖÁËÒ»¸öDZÔÚΣÏյĸüÐÂÖ°ÄÜ¡£¡£¡£¡£¡£¡£Ö»¹Ü¸ÃÀûÓ÷¨Ê½»¹Ã»Óп´µ½·Ö·¢Ä¾Âí»ò²»±ØÒªµÄÈí¼þ£¬£¬£¬£¬£¬£¬£¬£¬µ«Ëü¼ÓÔØºÍÆô¶¯ÐµĺÍδ¾ÑéÖ¤µÄÄ£¿£¿£¿£¿£¿£¿£¿£¿éµÄÖ°ÄÜ×é³ÉÁËDZÔÚµÄÍþв¡£¡£¡£¡£¡£¡£
ÓÉÓÚ·¨Ê½Í¨¹ý²»°²È«µÄͨ·£¨HTTPºÍ̸¶ø²»ÊǼÓÃܵÄHTTPS£©Óë·þÎñÆ÷ͨѶ£¬£¬£¬£¬£¬£¬£¬£¬Òò¶øÍøÂç·¸×ï·Ö×ÓÄܹ»hookÀ´×ÔÀûÓ÷¨Ê½µÄÒªÇ󡣡£¡£¡£¡£¡£ËûÃÇÄܹ»ÓÃÔ̺¬·ÖÆçµØÖ·µÄºÅÁî´úÌæºÅÁî¡£¡£¡£¡£¡£¡£ÕâʹµÃä¯ÀÀÆ÷´Ó¶ñÒâ·þÎñÆ÷¶ø²»ÊÇ×Ô¼ºµÄºÅÁîºÍ½ÚÔì·þÎñÆ÷ÏÂÔØÐÂÄ£¿£¿£¿£¿£¿£¿£¿£¿é¡£¡£¡£¡£¡£¡£ÓÉÓÚUCä¯ÀÀÆ÷ʹÓÃδÊðÃûµÄ²å¼þ£¬£¬£¬£¬£¬£¬£¬£¬Ëü½«Æô¶¯¶ñÒâÄ£¿£¿£¿£¿£¿£¿£¿£¿é¶øÎÞÐèÈκÎÑéÖ¤¡£¡£¡£¡£¡£¡£
Òò¶ø£¬£¬£¬£¬£¬£¬£¬£¬MITM¹¥»÷Äܹ»Ô®ÊÖÍøÂç·¸×ï·Ö×ÓʹÓÃUCä¯ÀÀÆ÷´«²¼Ö´Ðи÷Àà²Ù×÷µÄ¶ñÒâ²å¼þ¡£¡£¡£¡£¡£¡£ÀýÈ磬£¬£¬£¬£¬£¬£¬£¬ËûÃÇÄܹ»ÏÔÊ¾ÍøÂç´¹µöÓʼþÒÔÇÔÈ¡Óû§Ãû£¬£¬£¬£¬£¬£¬£¬£¬ÃÜÂ룬£¬£¬£¬£¬£¬£¬£¬ÒøÐп¨¾ßÌåÐÅÏ¢ºÍÆäËûÓ×ÎÒÊý¾Ý¡£¡£¡£¡£¡£¡£´Ë±í£¬£¬£¬£¬£¬£¬£¬£¬Ä¾ÂíÄ£¿£¿£¿£¿£¿£¿£¿£¿é½«¿ÉÄܽӼûÊܱ£»£»£»£»£»£»¤µÄä¯ÀÀÆ÷Îļþ²¢ÇÔÈ¡´æ´¢ÔÚ·¨Ê½Ä¿Â¼ÖеÄÃÜÂë¡£¡£¡£¡£¡£¡£
·ì϶ÀûÓÃ
Òª´ò¿ªÎļþ£¬£¬£¬£¬£¬£¬£¬£¬ä¯ÀÀÆ÷»á³¢ÊÔ´ÓºÅÁîºÍ½ÚÔì·þÎñÆ÷ÏÂÔØÏàÓ¦µÄ²å¼þ¡£¡£¡£¡£¡£¡£µ«ÊÇ£¬£¬£¬£¬£¬£¬£¬£¬ÓÉÓÚMITM´úÌæ£¬£¬£¬£¬£¬£¬£¬£¬ä¯ÀÀÆ÷»áÏÂÔØ²¢Æô¶¯·ÖÆçµÄ¿â¡£¡£¡£¡£¡£¡£¶øºó£¬£¬£¬£¬£¬£¬£¬£¬¸Ã¿â»á´´½¨Ò»ÌõÎı¾ÐÂÎÅ£¬£¬£¬£¬£¬£¬£¬£¬ÉÏÃæÐ´×Å¡°PWNED£¡¡±¡£¡£¡£¡£¡£¡£
´ò¿ªPDF¡£¡£¡£¡£¡£¡£
½¨¸´½¨Òé
½ØÖ¹±¾Îİ䲼ǰ£¬£¬£¬£¬£¬£¬£¬£¬UCä¯ÀÀÆ÷¹Ù·½»¹Î´½¨¸´´ËÎÊÌ⣬£¬£¬£¬£¬£¬£¬£¬½¨ÒéÓû§ÁÙʱ¾¡Á¿Ô¤·ÀʹÓÃUCä¯ÀÀÆ÷£¬£¬£¬£¬£¬£¬£¬£¬²¢ÔÚ¹Ù·½°ä²¼¸üк󣬣¬£¬£¬£¬£¬£¬£¬¾¡¿ìÉý¼¶½øÐн¨¸´¡£¡£¡£¡£¡£¡£
²Î¿¼Á´½Ó
https://thehackernews.com/2019/03/uc-browser-android-hacking.html


¾©¹«Íø°²±¸11010802024551ºÅ