smartstart.py | hacky proof of concept in Python showing lax security

by chrisshiplet Python Version: Current License: No License

X-Ray Key Features Code Snippets Community Discussions Vulnerabilities Install Support

kandi X-RAY | smartstart.py Summary

smartstart.py is a Python library. smartstart.py has no bugs, it has no vulnerabilities and it has low support. However smartstart.py build file is not available. You can download it from GitHub.

A hacky proof of concept in Python showing lax security in DEI brand (Viper, Clifford, Python, etc) SmartStart remote start systems' iOS app (and possibly others). All API requests are made via HTTPS, but the app doesn't validate certificates. This allows traffic to be easily spoofed with an HTTPS proxy. Username and password are sent in the GET requests from mobile devices over wifi or cellular data. Additionally, no noops are present and session IDs are also sent via parameter, so session hijacking and packet replay attacks may also be possible even if the username and password was not able to be sniffed. DISCLAIMER: Each account has a fixed amount of API calls. My 3 year plan had 22500. You should be fine as long as you don't do anything stupid. This project does not sniff traffic, it's simply a demonstration of the app's API to show what is possible with the obtained data.

Support

Quality

Security

License

Reuse

Support

smartstart.py has a low active ecosystem.

It has 6 star(s) with 0 fork(s). There are 2 watchers for this library.

It had no major release in the last 6 months.

smartstart.py has no issues reported. There are no pull requests.

It has a neutral sentiment in the developer community.

The latest version of smartstart.py is current.

Quality

smartstart.py has no bugs reported.

Security

smartstart.py has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

License

smartstart.py does not have a standard license declared.

Check the repository for any license declaration and review the terms closely.

Without a license, all rights are reserved, and you cannot use the library in your applications.

Reuse

smartstart.py releases are not available. You will need to build from source code and install.

smartstart.py has no build file. You will be need to create the build yourself to build the component from source.

Installation instructions, examples and code snippets are available.

Top functions reviewed by kandi - BETA

kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of smartstart.py

Get all kandi verified functions for this library.

smartstart.py Key Features

No Key Features are available at this moment for smartstart.py.

smartstart.py Examples and Code Snippets

No Code Snippets are available at this moment for smartstart.py.

Community Discussions

No Community Discussions are available at this moment for smartstart.py.Refer to stack overflow page for discussions.

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install smartstart.py

Assuming Python is installed, this script can be installed as follows:.

Support

For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .

Find more information at: