Database Users

Security Vulnerability in Tapatalk

This is a simple proof of concept, this apk retrieves your login credentials in plaintext for Android Forums from the tapatalk demo application. It was not designed for the pro nor the XDA versions, but this method may work on those versions as well. This application has been confirmed to work on MotoDroid (cyanogenmod6) and Droid Eris (various custom roms).
This application does not require root access at all. Just requires demo version of tapatalk, and previously logged into android forums).
Developers please encrypt sensitive data.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
*UPDATE* Removed file for now. This appears to be a two part vulnerability. First part being a permissions issue on some custom roms. Second is total lack of securing credentials on Tapatalk's part.

i can confirm this!!!

Yeah ...this works

yea it works. shows all my log info.

Yeah... shows everything....

jcase said:
This is a simple proof of concept, this apk retrieves your login credentials in plaintext for Android Forums from the tapatalk demo application. It was not designed for the pro nor the XDA versions, but this method may work on those versions as well. This application has been confirmed to work on MotoDroid (cyanogenmod6) and Droid Eris (various custom roms).
This application does not require root access at all. Just requires demo version of tapatalk, and previously logged into android forums).
Developers please encrypt sensitive data.
Click to expand...
Click to collapse
Nice work.

Still working this issue?

scandiun said:
Still working this issue?
Click to expand...
Click to collapse
This thread is nearly 2 years old, so I doubt you'll get a response. Also, since xda has a working friendship with the TapaTalk team I don't think discussion of hacking their software is appropriate. With that in mind I'll close this thread so it stops now.
Thread closed.

G App install walkthrough

Hello all,
I see people keep asking how to get G Apps on MIUI, and most answers I find lacking so here is (I Hope) an easy walkthrough:
First go to the additional settings:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Second click on privacy:
Third click the unknown sources:
Fourth go to the default tools folder and click on download:
Fifth turn off Xunlei download engine and set downloading to Unlimited (i know it says mobile data but i couldn't get the install to work without this step).
Sixth find the MI app store icon, mine was in the tools folder, launch the mi app store:
Seventh type in google in the search bar you should get the below screenshot. click the secone one (green one)
Eighth you should see the below screenshot result.
Ninth you should see the below icon installed
Tenth you will see the below screenshot, click the big blue button.
this is not a click and forget install, it will install 6 things but the installs are on you and pop up , each time one pops up click install and then click done once it completes.
Eleventh step: find the security app, click permissions. find the below circled apps and give them most of the permissions.
And then lauch the Google Playstore, by clicking on the playstore icon. I hope this helps. please PM me, if you see an error or post if you have a question. I will try to answer asap.

Hi,
There is an auto installer here:
http://xiaomitips.com/guide/install-gapps-stock-miui-google-installer/
Sent from my Redmi Note 4 using Tapatalk

THX
Wilderone said:
Hi,
There is an auto installer here:
http://xiaomitips.com/guide/install-gapps-stock-miui-google-installer/
Sent from my Redmi Note 4 using Tapatalk[
Yeah I have tried several different ways of getting GApps on a miui rom, I have had better success with the way I described, but if it works for you great its the same process but, i just have more screenshots
Click to expand...
Click to collapse

Pie Beta is now Available To Download

We are all waiting for the Pie beta and here we have it.
PIE BETA IS HERE
Re-Register the form to get Pro M2 pie beta immediately
https://docs.google.com/forms/d/e/1...89wJlMGg5LuaBoSxmaPdmNZ60nlwCQNUr5tkLdvzUUmjY

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

Is it legit? And is it worth updating at the beta stage?

satyajitd111 said:
Is it legit? And is it worth updating at the beta stage?
Click to expand...
Click to collapse
Yes, officially, I am updating will let u know all.

So far so good! Pie feels better than Oreo

Can you upload the PIE FIle
sidharth.gtm said:
So far so good! Pie feels better than Oreo
Click to expand...
Click to collapse
HI.... Can you please help with the Pie Update File. Unable to download the same from the Google Drive link provided by Asus as it got downloaded multiple time and it is not allowing me to download.

https://drive.google.com/open?id=1_r6zxR34q5aN72SPhAjMLkV4GxQcD4ff
ArulMurugan_1982 said:
HI.... Can you please help with the Pie Update File. Unable to download the same from the Google Drive link provided by Asus as it got downloaded multiple time and it is not allowing me to download.
Click to expand...
Click to collapse

Unable to download from the link provided by Asus
sidharth.gtm said:
Hi,
Thank you for helping with the link. I got the same link from Asus after completing the Google form.
However the link is not working (due to no. of download restrictions). Is it possible for you to upload it somewhere and share the link to download.
Sorry, you can't view or download this file at this time.
Too many users have viewed or downloaded this file recently. Please try accessing the file again later. If the file you are trying to access is particularly large or is shared with many people, it may take up to 24 hours to be able to view or download the file. If you still can't access a file after 24 hours, contact your domain administrator.
Click to expand...
Click to collapse

My Phone Cannot fetch new updates

Hello,
I have Samsung Galaxy S10+ unlocked which I purchased in March-2019.
It is not able to update to latest version of software. The last update it got was in April-2019.
After that it does not get any new updates. I downloaded SmartSwitch App, in hopes that it will update the software, but it also says the software update is current.
I contacted Samsung Customer care, they told me Factory Reset the phone. Which i don't want to do.
Is there any other way i Can force my phone to get the latest update?
Here are the screenshots of the phone.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

You can use Frija and odin to manually update without root or wipe. You should find the threads located in discussion forum on the S10plus.

Did you ever do a manual software update or have software done at an official samsung authorized store or repair center?

2freddie said:
Did you ever do a manual software update or have software done at an official samsung authorized store or repair center?
Click to expand...
Click to collapse
No. I did not.

Darkat70 said:
You can use Frija and odin to manually update without root or wipe. You should find the threads located in discussion forum on the S10plus.
Click to expand...
Click to collapse
Thank You Darkat. I used your method and was able to update it to the latest version.
I have one question, will it in future receive updates from Samsung or no?
Thanks

dharmil007 said:
Thank You Darkat. I used your method and was able to update it to the latest version.
I have one question, will it in future receive updates from Samsung or no?
Thanks
Click to expand...
Click to collapse
I assume that it would, my update came from my carrier, not Samsung. I did the initial jump in December to Android 10, i received Jan update, my Dec Build was the same as what my carrier released.

Question way to get google pay to work on 1.5.0 EEA BETA?

Sup guys,
as title says, is there any way to get it back to working? Or do i need get back to 1.1.7 EEA? If so, is there any way or guide to do so? didnt got any backup from my prev version, is this even possible? or do i have to wait not?
greets.

Issue originates as CTS fails as it's a beta build.
I'm having exactly the same issue.
A work a round would be to root the phone and run a magisk module to spoof CTS passing, however if you don't want to do that (like me), just either revert to 1.1.7 or wait for 1.5 to be officially released.
Unsure whether it wil show up under OTA updates so just keep an eye on the forums for the update to drop.

Google Pay works here with 1.5 EEA beta like a charm.
Please use a moded universal safetynet module as described here:
MarcoReckless said:
I tried the default Universal SafetyNet Fix and it didn't work, I also tried using a custom fingerprint but it would break my fingerprint scanner, I ended up using a modded version of the fix it CTS is passing for me.
Click to expand...
Click to collapse
In magisk you should use zygisk with activate the necessary google apps like play store and so on in the denial list.
Please don´t forget to clear the cache of the necessary apps like Play Store, wallet, and so on after the procedure and reboot. then you can activate your wallet and configure your credit cards and everything works.

It doesn't bother me yet that Google PAY-Wallet doesn't work.
I don't want and won't root to make it work for me.
The official registration form has been notified!
I still have a Watch with the Google PAY payment option.

I was also looking for this post. Anyone knows if this will work with 1.5 global beta?

With the next update to Android beta13, Google PAY-Wallet should work
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

Any beta release by default from any android is not expected to work Google Pay/Wallet , that;s the way Google decided

Just to update for people watching.
New 1.5 beta is out and can be found in another XDA thread.
Google Wallet is now working on the latest update.