Скачать или смотреть GPS Spoofing via API & Rooted Phone

Vulnerability Summary for GPS Spoofing via API:
The API connection from "https://owner-api.teslamotors.com/" allows for re-use of the exact vehicles GPS location to be then sent out as location of the owner, even when they are not at that current location. This allows an attacker to open the garage door from anywhere in the world (as they are allowed to spoof the co-ordinates of the vehicles).

PoC Code at: https://github.com/nullze/Tesla-Teste...

Option: `13: Trigger Homelink`

Vulnerability Summary for GPS Spoofing via Rooted Android Phone:
The Tesla Mobile Android Application can be ran from a rooted android device to then spoof the GPS co-ordinates of the owner. This allows remote access for an attacker anywhere in the world to summon the vehicle and slowly drive it anywhere, and to also open the garage door of the owner if the vehicle is parked at home.