Mobile QQ (Android) gesture password bypass

Mobile QQ (Android) gesture password bypass

Mobile QQ can directly bypass the password lock to view chat sessions or space, or even change the gesture password lock without the need of root.

When running QQ in the background, click the QQ icon and quickly click any location on the screen! If it succeeds, the session or level-2 menu corresponding to the click position is displayed on the main interface. If the main interface stays on the "set" tab at the time, and the gesture password appears in the background, we can use this vulnerability to enter the "Security and Privacy" tab to close or change the gesture password. (This vulnerability is not found in ios)



Lenovo a0000t A590 is successfully bypassed.

Qq version v4.6.0.1805

 

Junior high school party do not spray... Do not spray slag pixels...

Password qazwsxedc

Youku http://v.youku.com/v_show/id_XNzAxNTA1NDg0.html

Solution:

I really don't have time for my children's shoes on the second day. I don't know if it's right after my personal analysis. Please ask the officers to analyze and fix it...