diff --git a/404.html b/404.html new file mode 100644 index 0000000..0a27b71 --- /dev/null +++ b/404.html @@ -0,0 +1,53 @@ + + + + + + Lucia's Webpage + + + + +
================================================================================= + // ___ ___ ___ _________ ___ _____ _____ // + // / / / / / / / ______/ / / / | / | // + // / / / / / / / / / / / /| | / /| | // + // / / / / / / / / / / / /_| | / /_| | // + // / / / / / / / / / / / ___ |/ ___ | // + // / /______ / /___/ / / /______ / / / / | | / | | // + // /_________/ /_________/ /_________/ /__/ /__/ |__|_/ |__| // + // // +=================================================================================
+ +
+ _______ __________ _______ + / | / \ / | + / | / ____ \ / | + / /| | / / \ \ / /| | + / / | | | / \ | / / | | + / / | | | | | | / / | | + / / | | | | | | / / | | + / /____| |__ | | | | / /____| |__ +| | | | | | | | +|___________ ___| | \ / | |___________ ___| + | | \ \____/ / | | + | | \ / | | + |___| \__________/ |___| + +
+

Unfortunately this page doesn't exist (yet or anymore). Probably the former.

+
+ + + \ No newline at end of file diff --git a/assets/entry_data/spar_app_jokers.json b/assets/entry_data/spar_app_jokers.json new file mode 100644 index 0000000..4afc8e1 --- /dev/null +++ b/assets/entry_data/spar_app_jokers.json @@ -0,0 +1,7 @@ +{ + "href": "spar_app_jokers.html", + "date": "2025-04-04", + "author": "Lucia Zehentner", + "tags": ["android", "app", "exploit", "shopping", "SPAR"], + "content_warnings": [] +} diff --git a/assets/entry_data/spar_app_jokers.md b/assets/entry_data/spar_app_jokers.md new file mode 100644 index 0000000..f97dd01 --- /dev/null +++ b/assets/entry_data/spar_app_jokers.md @@ -0,0 +1,72 @@ +# How to get an infinite amount SPAR Jokers + +Austian retailer SPAR has released an relatively privacy-friendly discount app back in 2023. The user of the respective app can get so called -25% Jokers. Those jokers however are limited to 4 items and take some time to become available again, similar to their analoge counterpart. However due to the afformentioned privacy-friendliness of this particular app, unlike many other shopping apps it doesn't need an account to verify that the jokers are only used once by a customer within a certain timeframe. This is due to the information, whether one or multiple jokers have been used does appere to only be stored only locally on your phone. This fact makes the exploit explained in the following chapters possible as of April 2025. + +## Things to consider + +While the basic exploit only takes a few steps to perform, it should be mentioned, performing it will cause **the loss of all digital receipts saved within the app**, any configurations you've done on the app, as well as the "Saved so far in 202x"-amount. You'll also recieve a new customer ID in the form of the bar code you'd scan at checkout, however this can be considered a positive, if you are concerned about fingerprinting. As for digital receipts, a feature I've been using myself quite often, you can export them as a PDF within the app using the export button. + +Unfortunately there's currently no mass-export feature so you have to do this with each individual receipt. + +## Performing of the exploit + +The following writeup has been tested to on Android 13, 14 and 15, with the particular version shown within screenshots being LineageOS 22.1 (Android 15) on a Fairphone 3+ with the system language set to English (Austria) - yes, this language is a thing within the Android OS. Depending on phones vendor and firmware the menus may look a bit different, but the overall layout and provided options should be similar enough. The exploit should be doable on iOS as well, however I currently have no feasable way of testing this¹ yet. + +
+
+ A screenshot of the SPAR app. On the top 'Meine Ersparnis 2025: € 61,15' is visible. Also 0 Jokers are available. +
Step 0
+
+
+ A screenshot of the trebuchet app drawer, in the third row the SPAR App icon is visible. +
Step 1
+
+
+ A screenshot of the trebuchet app drawer, in the third row the SPAR App icon is visible. There's now a context menu opened which provides the options 'App info' and 'Digitaler Pfandbon'. +
Steps 2 and 3
+
+
+ +0. Before starting we have no Jokers left. This is very sad, of course and we should seek a remedy for this. +1. Locate the Spar app on your home screen or within your app drawer +2. Long-press the app icon until a context menu pops up +3. Within this context menu, select the option "App info" + +
+
+ A screenshot of an Android app info screen for the SPAR app. There are multiple options provided including 'Storage and cache'. +
Step 4
+
+
+ A screenshot of the storage and cache page of the SPAR app info. The option 'Clear storage' is provided in the top left alongside other options. +
Step 5
+
+
+ A screenshot of a 'Delete app data?'-prompt. Options provided are 'Cancel' and 'Delete'. +
Step 6
+
+
+ +4. Select the option "Storage and cache" in the now displayed info screen +5. Press "Clear Storage" +6. Confirm the prompt, that you want to delete all data + +
+
+ A screenshot of the SPAR app. On the top 'Meine Ersparnis 2025: € 0,-' is visible. There are four Jokers are available. +
Step 7 (not pictured) and 8
+
+
+ +7. Now open the app, skip the app tutorial and agree to the TOS once more +8. All done. The jokers should be restored. + +Alternatively you also could uninstall and reinstall the app every time, however I find this more tedious and time consuming than just doing the afformentioned steps. + +## More stuff to come + +I'll try to soon get around asking people who use iOS to test this exploit themselves, so I can verify the validity of this exploit on iOS devices. A writeup on performing this exploit on iOS is found [here](/blog/spar_app_jokers_ios), if it's already available by the time you read this. I'm also planing to take a closer look at how the data of the app is stored, this might be useful to e.g. mass export digital reciepts or to keep configurations, while reseting the jokers and customer ID. + +
+¹ I'm not setting up a MacOS VM in order to be able to do some xcode shenanigans, sorry. +
diff --git a/assets/img/88x31/friends/ohaa.png b/assets/img/88x31/friends/ohaa.png new file mode 100644 index 0000000..fee3524 Binary files /dev/null and b/assets/img/88x31/friends/ohaa.png differ diff --git a/assets/img/blog/spar_app_jokers/step_0.png b/assets/img/blog/spar_app_jokers/step_0.png new file mode 100644 index 0000000..f90de2f Binary files /dev/null and b/assets/img/blog/spar_app_jokers/step_0.png differ diff --git a/assets/img/blog/spar_app_jokers/step_1.png b/assets/img/blog/spar_app_jokers/step_1.png new file mode 100644 index 0000000..f10d393 Binary files /dev/null and b/assets/img/blog/spar_app_jokers/step_1.png differ diff --git a/assets/img/blog/spar_app_jokers/step_2_3.png b/assets/img/blog/spar_app_jokers/step_2_3.png new file mode 100644 index 0000000..5bf03be Binary files /dev/null and b/assets/img/blog/spar_app_jokers/step_2_3.png differ diff --git a/assets/img/blog/spar_app_jokers/step_4.png b/assets/img/blog/spar_app_jokers/step_4.png new file mode 100644 index 0000000..a314743 Binary files /dev/null and b/assets/img/blog/spar_app_jokers/step_4.png differ diff --git a/assets/img/blog/spar_app_jokers/step_5.png b/assets/img/blog/spar_app_jokers/step_5.png new file mode 100644 index 0000000..15acc67 Binary files /dev/null and b/assets/img/blog/spar_app_jokers/step_5.png differ diff --git a/assets/img/blog/spar_app_jokers/step_6.png b/assets/img/blog/spar_app_jokers/step_6.png new file mode 100644 index 0000000..0a5717c Binary files /dev/null and b/assets/img/blog/spar_app_jokers/step_6.png differ diff --git a/assets/img/blog/spar_app_jokers/step_7_8.png b/assets/img/blog/spar_app_jokers/step_7_8.png new file mode 100644 index 0000000..b7aa795 Binary files /dev/null and b/assets/img/blog/spar_app_jokers/step_7_8.png differ diff --git a/blog.html b/blog.html index a2f5be2..85f4f56 100644 --- a/blog.html +++ b/blog.html @@ -27,20 +27,26 @@

entries

tags