WP7 Marketplace might actually be hacked, proof of concept emerges

Apparently phone hackers don't take a break over the Christmas period. Just over 24 hours ago, we reported that someone claimed that the Windows Phone 7 marketplace had been hacked, almost.

The long winded method needed work and required a lot of manual intervention, and now it appears that a proof of concept tool has emerged that completes the process, as well as making it fully automated from beginning to end. That was fast.

WPCentral reports that they have seen the tool in action. Created by a "white hat" developer, the application is called "FreeMarketplace" and performs the original steps outlined in the whitepaper by;

  1. Downloading the entire marketplace using a C# code snippet that was provided
  2. Circumventing the maximum application sideload limit, which was originally outlined on WithinWindows
  3. Enabling deployment of the disabled XAP files by deleting a file header inside the XAP "Zip" itself
  4. Activating the disabled marketplace XAP by replacing an entry assemly (the example used an open source app which had the debug assembly freely available
  5. Removing the XAP's security signatures
  6. Replacing the marketplace published entry assembly with a facade debug assembly

You can even see the tool in action for yourself, in a video that shows off how it works below.

  

Microsoft was contacted about the breach, and WPCentral are working with Microsoft to address the issue. Right now, other than this video there aren't many more details about how the hack works, or how the application was built so quickly.

Report a problem with article
Previous Story

Daily Gaming: December 29, 2010

Next Story

Skype adds video calling for iOS devices

19 Comments

Commenting is disabled on this article.

lordcanti86 said,
Since there is app piracy on iPhone and Android, why did people think that WP7 would turn out differently?

This is proof of concept only, it's not being released to anyone and Microsoft have been informed of this "exploit" and will be patching it.

lordcanti86 said,
Since there is app piracy on iPhone and Android, why did people think that WP7 would turn out differently?

but can you download any app directly from iTunes or Android Marketplace for free?

gawicks said,
Has Microsoft made an official statement about this ?

I'd be interested to know that as well, I assume they will do though.

whats this mean? free apps?

and i noticed fruit ninja quicly moved to #1 on paid apps. this should be incentive for other established app firms to develop for wp7 *cough cough angry birds*

jasonon said,
whats this mean? free apps?

and i noticed fruit ninja quicly moved to #1 on paid apps. this should be incentive for other established app firms to develop for wp7 *cough cough angry birds*


Didn't Rovio (the developers of Angry Birds) say that AB is coming for WP7 in early 2011?

/- Razorfold said,

Didn't Rovio (the developers of Angry Birds) say that AB is coming for WP7 in early 2011?

That's correct, I have AB on my Desire and i'm really looking forward to a WP7 version.

jasonon said,
whats this mean? free apps?

and i noticed fruit ninja quicly moved to #1 on paid apps. this should be incentive for other established app firms to develop for wp7 *cough cough angry birds*

I think the guy says in the video that its a proof of concept and they wont release it. They find security breaches so Microsoft can fix them.

Of course this method works but you still need an unlocked device for this to work which will relock itself every 2 weeks so it's hardly a full hack.

xbamaris said,
Kind of ironic that he can hack the Windows Marketplace but not use a screen capture software =/

Seriously. I was waiting for him to show the app on his phone as proof that the software worked or something to make using a camera worth it.

ie9 said,

Seriously. I was waiting for him to show the app on his phone as proof that the software worked or something to make using a camera worth it.


Yeah, am wondering if it actually works

The Protagonist said,

sucks, i have a few apps currently on the WP7 market at the moment

I don't think it will really make that big of a difference. I don't know the actual numbers, but I can't imagine that more than 1% of users will take advantage of this. For instance, with the iPhone, there can't be a significant enough number of people who jailbreak their phone to make a dent in app sales.