PoCs Check

Guide
中文

Get Location Test Guide

Summary Description

Get Location is used to test Dapp silent retrieval of the current device's GPS location information. When retrieving the device's GPS location, permission should be requested, and by default, the Dapp should not be granted GPS location access directly.

Vulnerability Identification

Click the "Get Location" button on the page and wait for 3-5 seconds. If the current device's latitude and longitude are printed on the page, the vulnerability is confirmed.

Solution

It is recommended to alert users about GPS location read operations and to request user authorization before executing these actions.

Click the button to get location.