⚠ Full Attack Chain
Launching exploit: intent redirect → Help Center WebView → javascript:// XSS → Zendesk data theft → exfiltration
- Redirecting to Luno Help Center via intent://...
- Injecting javascript:// XSS payload...
- Stealing Zendesk user data via sync XHR...
- Exfiltrating to attacker server...
- Firing silent deeplinks...
- Displaying stolen data...
Waiting for exfiltrated data from WebView XSS...
⚠ STOLEN DATA — Full Chain PoC
| Field | Stolen Value |
|---|