CVE-2019-2215

Bad-Binder CVE-2019-2215 以下是针对 bad binder CVE-2019-2215 漏洞的利用程序，已在 x86 模拟器上测试。其目的是利用 UAF 漏洞触发 AAR 原语来泄漏内核地址，并使用 AAW 原语覆盖 addrlimit，从而获得内核读写原语，使我们可以修改 credstruct 以实现本地权限提升 LPE。 致谢 https://googleprojectzero.blogspot.com/2019/11/bad-binder-android-in-wild-exploit.html...

CVE-2019-2215

CVE-2019-2215 Exploit for the Bad Binder vulnerability in Android written by @wired0ut. It abuses the UAF in order to leak taskstruct, then overwrites addrlimit and escalates privileges by overwriting the id block in cred. The full flow of the research and exploitation can be found here series of...