`# Exploit Title: Google Play Protect 22.4.25 - Detection Bypass
# Date: 2022-02-14
# Exploit Author: Aryan Chehreghani
# Contact: [email protected]
# Vendor Homepage: https://play.google.com
# Version: 22.4.25 (Possibly all versions)
# Tested on: Android 5.1.1
# [ About - Google Play Protect ]:
#Google Play Protect is Google's built-in malware protection for Android,
#Backed by the strength of Google's machine learning algorithms, it is always improving in real time,
#Google Play Protect continuously works to keep your device, data and apps safe,
#It automatically scans your device and makes sure that you have the latest in mobile security, so you can rest easy,
#All Android apps undergo rigorous security testing before appearing in the Google Play Store,
#Play Protect scans billions of apps daily to make sure that everything remains spot on.
# [ Steps ]:
# 1.Build a Android Payload
# 2.Install the Payload ( The google play protect has detected the payload as unsafe )
# 3.Clear the payload
# 4.With Using the Android editor program change the (Target Sdk to '39')
# 5.Install Payload again ( The google play protect will not be able to detect the Payload as unsafe )
# [ PoC - Video ]:
https://drive.google.com/file/d/1KiTalfk7b8VZPJVsCF_EoLsTQob5GVA7/view?usp=sharing
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation