Description

Detects the use of insecure socket connections in Android applications that could expose sensitive data to network-based attacks. This vulnerability occurs when an app creates sockets through SSLCertificateSocketFactory.getInsecure, potentially allowing attackers to intercept or manipulate network traffic.

Detection Strategy

• Looks for calls to SSLCertificateSocketFactory.getInsecure in the application code

• Reports a vulnerability when a class whose name contains Activity makes that call