[Google] Full Google/Gemini Assistant Access on Pixel Lock Screen and "Lock Down" mode

Pixel phones which have disabled Google Assistant and which are in "Screen Lock" or in "Lock Down" mode are allowing full access to Google Assistant or Gemini as Assistant.

On Locked Screen or in "Lock Down" mode, an unusual behaviour is allowing this which I think shouldn't be as it is.

POC steps are really simple -

1. Turn OFF Google Assistant.
2. Lock the screen or enable "Lock Down" mode.
3. Trigger Google Assistant by pressing the Lock button.
4. A popup will appear to turn ON the Google Assistant (the unusual behaviour).
5. Click on "Turn ON".

Assistant now can perform actions based on the Google Assistant privacy settings, which includes allowing to do the following -
major one's like fetching personal results, making a phone call (using Apps as well like WhatsApp), send messages (using Apps as well like WhatsApp) or even control devices which are added to Home App like TV, AC, IP cams, Fridge etc....

Timeline -

Reported - 18.05.2024

Closed - 20.05.2024

"Hi! We've investigated your submission and decided not to track it as a security bug, as we're already aware of this problem.

Some background: Users of Android phones are able to configure unlocking their phone when saying OK Google. This feature is called "Voice Match" or "Trusted Voice", depending on the Android version in use. Sometimes, this setting gets enabled when setting up the Google Assistant.

Please kindly check in your phone settings if this unlocking feature is enabled. This might be under different settings depending on your Android version, phone manufacturer, or your locale settings – check your settings for "Smart Lock", "Voice match", or "Trusted Voice". For example, on a Google Pixel in Android Oreo, this should be visible under Settings > Security and Location > Trust Agents. In Samsung phones, this might be under Settings > Lock Screen and Security > Smart Lock > Trusted Voice > Unlock with Voice Match.

To keep your phone from unlocking when you say OK Google, or a closely matching phrase, please turn this feature off.

For more details, see these articles on Pixel and Google Assistant. We are aware that the voice recognition is not perfect, and that there might be various bypass methods by e.g. recording the phrase and then replaying it, or triggering certain actions in Google Assistant. You can block all of those vectors by disabling Voice Match/Trusted Voice in your settings.

If we misunderstood your report, please let us know."

Me - 21.05.2024

"Hey!
THIS REPORT HAS BEEN MISUNDERSTOOD.
As your reply stated, the Google Assistant is turned off in this POC.
The report itself shows the ability to turn on the Google Assistant when it's turned off.
The "Voice match" or "Trusted voice" is disabled in this POC.
In fact you don't even need a voice. To prove it, turn on keyboard as input device preference and you can still reproduce the issue with same steps.
In Android 14, the "Trust Agents" are also turned off and the issue is still reproducible.
Please read the report and watch the POC video."

Triaged - 25.05.2024

Closed as working as intended - 25.05.2024

Popular posts from this blog

[Google] Access to BGP server + DOM XSS

 A hacker could have had the access to a BGP REST API server without any authorisation which was leading to leak of internal network info, devices info, network configuration and modification. Apart from that, there was a DOM XSS vulnerability in the target IP asset as well. POC - An IP address had a BGP server running on it. The access to it was an API service " Sonic Network Management APIs". These API calls could have been made without authorisation(access_token) and they were all listed with specifications on - " https://IP/ui/model.html". Endpoints such as - /ui/model.html?urls.primaryName=sonic-interface.yaml#/sonic-interface/get_sonic_interface_sonic_interface /ui/model.html?urls.primaryName=sonic-port.yaml#/sonic-port/get_sonic_port_sonic_port /ui/model.html?urls.primaryName=openconfig-lldp.yaml#/openconfig-lldp/get_openconfig_lldp_lldp_interfaces /ui/model.html?urls.primaryName=openconfig-platform.yaml#/openconfig-platform/get_openconfig_platform_components...
Read more

[Google] YouTube "restconf" Swagger-UI XSS

  During my recon, I came across a few Google owned IP assets which were running "restconfig" services hosted on Swagger-UI. Dawid Moczadło has written a detailed article here . POC - Three IP assets on -  "https://IP/ui" were vulnerable to DOM XSS on this endpoint - "/ui/model.html?configUrl=http://hackingmonks/test.json". The Swagger-UI did show the available API endpoints for the service but had authorisation in place(access_token was needed). During this period, I had found 4th asset which had the same vulnerability along with additional exploitation, which was reported in another ticket. The write-up can be found here ( Access to BGP server + DOM XSS ). Timeline - Reported - 22.05.2023 Triaged - 22.05.2023 The assets were no longer accessible to the public -  09.06.2023 Accepted - 07.06.2023 Rewarded - 13.06.2023 Google's date for the fix - 08.12.2023
Read more

[Google] Disclose hidden Blogger profile Display name and Profile photo

 Because of an unfiltered response to an API call, it was possible for anyone to fetch hidden Blogger Profile Display name and Profile photo. POC - An endpoint going to - ========================================= GET https://blogger.googleapis.com/v3/blogs/target_blog_id/posts?fetchBodies=true&fetchImages=true&maxResults=69&view=VIEW_TYPE_UNSPECIFIED&key=[YOUR_API_KEY] HTTP/1.1 Authorization: Bearer [YOUR_ACCESS_TOKEN] ========================================= Would respond with the hidden Profile Display name and Profile photo as below - ========================================= "author": {     "id": "blogger_id",     "displayName": "blogger_name",     "url": "https://www.blogger.com/profile/blogger_id",     "image": {       "url": "//2.bp.blogspot.com/blogger_photo.jpg" } ========================================= Timeline - Reported - 31.01.2023 Triaged - 01.02.2023 Acc...
Read more