CVE-2017-17692

This Metasploit module exploits a Same-Origin Policy (SOP) bypass in Samsung Internet Browser by injecting malicious JavaScript to capture credentials via a fake prompt. It sets up a web server to deliver the exploit and collect POST data containing stolen credentials.

This repository contains a writeup and video PoC for CVE-2017-17692, a Same-Origin Policy (SOP) bypass vulnerability in the Samsung Browser. The vulnerability was patched in the Galaxy Note8 and via an app store update in October 2017.

This Metasploit module exploits a Same-Origin Policy (SOP) bypass vulnerability in Samsung Internet Browser to steal credentials via a fake pop-up. It serves a malicious webpage that opens a new tab and injects JavaScript to capture user input.