Tod Beardsley, Pirate Captain of the Metasploit Framework, gives Alicia Webb a real-world demo of how to hack a current generation Android phone by exploiting the WebView addJavascriptInterface bug — even though the exploit has been well documented for over 3 years.

Depending on your source, between 70% and 95% of all Android devices currently in use are vulnerable to this kind of attack.

Subscribe to our channel so you don’t miss any of the DEFCON 22 content we’re producing this year!

Follow us on Twitter and Instagram @secureninja!

Check out our Facebook page at