Android IMAP and SMTP password Hack
Android will expose your IMAP password in wrong hands
Android IMAP password HackIn: 2FA, Exploit, Social Engineering
Having your android device unlocked will definitely results in password disclosure.
- Open Your IMAP/SMTP settings.
- Change address of your SMTP mail server to a computer under your control and make sure "Authorisation" is checked.
- Fire up netcat, pretend to be a mail server and ask for authorization.
- Let android try to authentificate and get your victim's password..
This option should really ask you to re-enter your password prior to a server change.
Join the talk
Share your toughts on the subject or whatever you would like to know.