android
android 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Android Bluetooth – ‘Blueborne’ Information Leak (2)
from pwn import *
Android Bluetooth – ‘Blueborne’ Information Leak (1)
from pwn import *
Virtual Postage (VPA) – Man In The Middle Remote Code Execution
# Exploit Title: Virtual Postage (VPA) - Remote Code Execution via MITM
SKILLS.com.au Industry App – Man In The Middle Remote Code Execution
# Exploit Title: SKILLS.com.au Industry App - Remote Code Execution via MITM
Australian Education App – Remote Code Execution
# Exploit Title: Australian Education App - Remote Code Execution
BestSafe Browser – Man In The Middle Remote Code Execution
# Exploit Title: BestSafe Browser FREE NoAds - Remote Code Execution
eVestigator Forensic PenTester – Man In The Middle Remote Code Execution
# Exploit Title: eVestigator Forensic PenTester v1 - Remote Code Execution via MITM
LG MRA58K – ‘ASFParser::SetMetaData’ Stack Overflow
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1226
Google Chrome – V8 Private Property Arbitrary Code Execution
// Source: https://github.com/secmob/pwnfest2016/
LG MRA58K – ‘ASFParser::ParseHeaderExtensionObjects’ Missing Bounds-Checking
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1222
LG MRA58K – Missing Bounds-Checking in AVI Stream Parsing
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1206
LG MRA58K – Out-of-Bounds Heap Read in CAVIFileParser::Destroy Resulting in Invalid Free
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1221
Linux Kernel – ‘ping’ Local Denial of Service
// Source: https://raw.githubusercontent.com/danieljiang0415/android_kernel_crash_poc/master/panic.c
LG G4 MRA58K – ‘mkvparser::Block::Block’ Heap Buffer Overflow
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1124
LG G4 MRA58K – ‘mkvparser::Tracks constructor’ Failure to Initialise Pointers
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1117
LG G4 MRA58K – ‘liblg_parser_mkv.so’ Bad Allocation Calls
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1102
Google Android – android.util.MemoryIntArray Ashmem Race Conditions
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1002
Google Android – Inter-process munmap in android.util.MemoryIntArray
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1001
LG G4 – Touchscreen Driver write_log Kernel Read/Write
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=990
LG G4 – lghashstorageserver Directory Traversal
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=987
LG G4 – lgdrmserver Binder Service Multiple Race Conditions
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=986
Google Android – ‘rkp_set_init_page_ro’ RKP Memory Corruption
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=984
Google Android – RKP Information Disclosure via s2-remapping Physical Ranges
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=982
Google Android – RKP EL1 Code Loading Bypass
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=981
Google Android – Unprotected MSRs in EL1 RKP Privilege Escalation
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=980
Google Android – ‘cfp_ropp_new_key_reenc’ / ‘cfp_ropp_new_key’ RKP Memory Corruption
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=979
Google Android – ‘pm_qos’ KASLR Bypass
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=971
Google Android TSP sysfs – ‘cmd_store’ Multiple Overflows
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=967
Google Android max86902 Driver – ‘sysfs’ Interfaces Race Condition
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=963
Google Android – WifiNative::setHotlist Stack Overflow
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=958
Samsung Devices KNOX Extensions – OTP TrustZone Trustlet Stack Buffer Overflow
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=938
Samsung Devices KNOX Extensions – OTP Service Heap Overflow
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=935
Google Android – ‘IOMXNodeInstance::enableNativeBuffers’ Unchecked Index
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=932
Google Android – Inter-Process munmap with User-Controlled Size in android.graphics.Bitmap
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=928
Broadcom BCM43xx Wi-Fi – ‘BroadPWN’ Denial of Service
This Exploit allows arbitrary memory writes and reads. Running the specified payload within this package will write t...
Google Android – Binder Generic ASLR Leak
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=889
Google Android – Insufficient Binder Message Verification Pointer Leak
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=860
Google Android – getpidcon Usage binder Service Replacement Race Condition
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=851
Google Android – libutils UTF16 to UTF8 Conversion Heap Buffer Overflow
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=840
Google Android – ‘/system/bin/sdcard’ Stack Buffer Overflow (PoC)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=798