We throw ourselves on Termux and in fact it works. This vuln in Tw allows exfiltration methods and we can even try steganography... $curl 'https://pbs.twimg.co

We throw ourselves on Termux and in fact it works. This vuln in Tw allows exfiltration methods and we can even try steganography... $curl 'https://pbs.twimg.com/media/DqteCf6WsAAhqwV?format=jpg' https://pbs.twimg.com/media/DqteCf6WsAAhqwV?format=jpg' > output $ file output output: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16 $ strings output.jpg | grep PK $./binwalk output.jpg $7z x shakespeare.part001.rar $ file shakespeare.html shakespeare.html: XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators