Description

Detects Android applications that fail to properly verify SSL/TLS hostnames during certificate validation. This vulnerability allows attackers to perform man-in-the-middle attacks by presenting valid certificates for different hostnames, potentially compromising encrypted communications.

Detection Strategy

• Reads the decompiled code of the classes whose name contains Activity

• Reports a vulnerability when that code mentions SSLSocket and does not mention getDefaultHostnameVerifier