Collected research

iPhone Camera Hack

Ryan Pickren · Ryan Pickren

Chains Safari URI parsing, origin assignment and secure-context flaws so a malicious popup can masquerade as an origin that previously received camera permission. The browser then exposes camera and microphone access without a new permission prompt.

Record

Researcher

Ryan Pickren

Published by

Ryan Pickren

In the archive

• Collected in the 2020 research round

Tags

• browser
• same-origin-policy
• sop-bypass
• attack-chain
• info-leak
• owasp-a01-2021

This page is the archive's own catalogue record. The research is the work of Ryan Pickren, first published at the original source. Preserved copies are kept so the citation survives its host.