janus-toolkit

Kit de herramientas Janus Esta es una colección de herramientas para el exploit Janus CVE-2017-13156, que afecta a las versiones 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 de AOSP, tal como se describe aquí. Puedes leer más en el informe de Guardsquare. Herramientas Janus Extractor de...

threatDemos

🚨 Repositorio de Demostraciones de Amenazas de Seguridad en Android Una colección completa de vulnerabilidades de seguridad de Android y vectores de ataque de prueba de concepto Este repositorio sirve como recurso educativo que muestra amenazas de seguridad de Android del mundo real y sus...

Janus-Vulnerability-CVE-2017-13156-Exploit

Este repositorio no tiene un README...

Janus-CVE-2017-13156

Janus-CVE-2017-13156 Instrucciones de uso : java -jar Janus.jar Janus dexfile apkfile outputfile Janus.jar : source/Janus.jar...

ZTE Blade Vantage Z839 Emode.APK android.uid.system Privilege Escalation

ZTE Blade Vantage Z839 Emode.APK android.uid.system LPE exploit =============================================================== ZTE Blade Vantage Z839 Android handsets running 7.1.1 contain an engineering mode that utilizes "Android Secret Codes" for accessing hidden engineering functionality. Su...

Android Janus - APK Signature Bypass Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/payload/apk' class MetasploitModule "Android Janus APK Signature bypass", 'Description' = %q This module exploits CVE-2017-13156 in Android to install ...

CVE-2017-13156

creationtimestamp| type| source ---|---|--- 2019-11-07 02:36:10+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/android/local/janus.rb 2019-11-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47601 2021-08-17 13:01:03+00:00| seen|...

Android Janus APK Signature Bypass

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/payload/apk' class MetasploitModule "Android Janus APK Signature bypass", 'Description' = %q This module exploits CVE-2017-13156 in Android to install ...

CVE-2017-13156

An elevation of privilege vulnerability in the Android system art. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-64211847...

CVE-2017-13156

CVE-2017-13156 is an elevation of privilege vulnerability in the Android system (ART) affecting versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0 . The root cause involves a flaw where the Android package installer fails to check extra data before PKZIP, allowing an attacker to concat DEX an...

Android Janus APK Signature bypass

This module exploits CVE-2017-13156 in Android to install a payload into another application. The payload APK will have the same signature and can be installed as an update, preserving the existing data. The vulnerability was fixed in the 5th December 2017 security patch, and was additionally fix...