64 matches found
radare2 'dalvik_op' function heap buffer overflow vulnerability
radare2 is a set of libraries and tools for working with binary files. A heap buffer overflow vulnerability exists in the 'dalvikop' function of the analdalvik.c file in radare2 version 2.4.0. A remote attacker can exploit this vulnerability to cause a denial of service with the help of a special...
Dex-Oracle - A pattern based Dalvik deobfuscator which uses limited execution to improve semantic analysis
A pattern based Dalvik deobfuscator which uses limited execution to improve semantic analysis. Also, the inspiration for another Android deobfuscator: Simplify. Before After sha1: a68d5d2da7550d35f7dbefc21b7deebe3f4005f3 md5: 2dd2eeeda08ac8c15be8a9f2d01adbe8 Installation Step 1. Install Smali /...
Bitdefender Internet Security Dalvik Integer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
radare2 buffer overflow vulnerability
radare2 is a set of libraries and tools for working with binary files. A buffer overflow vulnerability in the dalvikdisassemble function in libr/asm/p/asmdalvik.c in radare2 version 1.2.1 allows remote attackers to exploit the vulnerability to cause a denial of service stack buffer overflow and...
UBUNTU-CVE-2017-6448
The dalvikdisassemble function in libr/asm/p/asmdalvik.c in radare2 1.2.1 allows remote attackers to cause a denial of service stack-based buffer overflow and application crash or possibly have unspecified other impact via a crafted DEX file...
Stack overflow
The dalvikdisassemble function in libr/asm/p/asmdalvik.c in radare2 1.2.1 allows remote attackers to cause a denial of service stack-based buffer overflow and application crash or possibly have unspecified other impact via a crafted DEX file...
Android system_server Code Loading Bypass Vulnerability
Exploit for Android platform in category local exploits Android: Code loading bypasses in systemserver As of Android Nougat, a new set of SELinux rules have been added which are designed to prevent systemserver from loading arbitrary code into its address-space. This has been enforced by adding t...
MARA Framework - Mobile Application Reverse engineering and Analysis Framework
MARA is a M obile A pplication R everse engineering and A nalysis Framework. It is a tool that puts together commonly used mobile application reverse engineering tools, in order to make the task or reverse engineering and analysis easier and friendly to mobile application developers and security...
The vulnerability of the Kaspersky Anti-Virus antivirus protection allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of Kaspersky Anti-Virus lies in the insufficient processing of a specific format string, which leads to buffer overflows. Exploiting this vulnerability can allow an attacker to cause service interruptions or execute arbitrary code using DEX files during the antivirus software’s...
CVE-2015-4641
Directory traversal vulnerability in the SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices allows remote web servers to write to arbitrary files, and consequently execute arbitrary code in a privileged context, by leveraging control of the...
[CORE-2015-0002] - Android WiFi-Direct Denial of Service
Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Android WiFi-Direct Denial of Service 1. Advisory Information Title: Android WiFi-Direct Denial of Service Advisory ID: CORE-2015-0002 Advisory URL: http://www.coresecurity.com/advisories/android-wifi-direct-denial-service Date...
Android Wi-Fi Direct Vulnerability Lets Hackers to Kick your Devices OFF
Security researchers from Core Security has reportedly found a Denial of Service DoS attack vulnerability in Android WiFi-Direct. Android's WiFi-Direct is a wireless technology that allows two devices to establish a direct, peer-to-peer Wi-Fi connection without requiring a wireless router...
Android WiFi-Direct Denial Of Service
Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Android WiFi-Direct Denial of Service 1. Advisory Information Title: Android WiFi-Direct Denial of Service Advisory ID: CORE-2015-0002 Advisory URL: http://www.coresecurity.com/advisories/android-wifi-direct-denial-service Date...
Android Meterpreter, Android Reverse HTTPS Stager
Run a meterpreter server in Android. Tunnel communication over HTTPS This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = :dynamic include Msf::Payload::Stager include...
[APKinspector] Powerful GUI tool to analyze the Android applications
The goal of this project is to aide analysts and reverse engineers to visualize compiled Android packages and their corresponding DEX code. APKInspector provides both analysis functions and graphic features for the users to gain deep insight into the malicious apps: CFG Call Graph Static...
Android 4.2.x Superuser Unsanitized Environment Vulnerability
Vulnerable releases of several common Android Superuser packages may allow malicious Android applications to execute arbitrary commands as root without notifying the device owner. This advisoriy documents PATH and BOOTCLASSPATH vulnerabilities. Vulnerable releases of several common Android...
[Drozer] The Leading Security Testing Framework for Android.
drozer enables you to search for security vulnerabilities in apps and devices by assuming the role of an app and interacting with the Dalvik VM, other apps’ IPC endpoints and the underlying OS. drozer provides tools to help you use and share public Android exploits. It helps you to deploy a droze...
Android Meterpreter, Android Reverse TCP Stager
Run a meterpreter server in Android. Connect back stager This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = :dynamic include Msf::Payload::Stager include Msf::Payload::Android include...
CVE-2009-3698
An unspecified function in the Dalvik API in Android 1.5 and earlier allows remote attackers to cause a denial of service system process restart via a crafted application, possibly a related issue to CVE-2009-2656...
Design/Logic Flaw
An unspecified function in the Dalvik API in Android 1.5 and earlier allows remote attackers to cause a denial of service system process restart via a crafted application, possibly a related issue to CVE-2009-2656...