19 matches found
DirtyPipe-Android
DirtyPipe para Android Dirty Pipe CVE-2022-0847 PoC de root temporal para Android. Objetivos Actualmente solo funciona en Pixel 6 con nivel de parche de seguridad del 2022-02-05 al 2022-04-05. No lo uses en otros dispositivos ni otras versiones. Debe fallar reiniciar. Dirty Pipe finalmente fue...
bad_io_uring
Bad IOuring https://www.blackhat.com/us-23/briefings/schedule/index.htmlbad-iouring-a-new-era-of-rooting-for-android-32243 Construir el exploit Asegúrate de que Android NDK esté instalado. Para Pixel 6, root@kitploit: make pixel Para Samsung S22, root@kitploit: make s22 Cómo usar el exploit El...
CVE-2022-46395
Exploit for CVE-2022-46395 The write up can be found here. This is a bug in the Arm Mali kernel driver that I reported in November 2022. The bug can be used to gain arbitrary kernel code execution from the untrusted app domain, which is then used to disable SELinux and gain root. The exploit is...
ABL_ROP
Updating ABL serial with ROP: When ran this notebook will load ABL and attempt to update the device's serial number via ROP chain to call memmove. Derived from eShard's https://github.com/eshard/pixel6-boot/blob/main/runablpublic.ipynb whilst following along with...
CVE-2022-20186_CTXZ
Exploit for CVE-2022-20186 The write up can be found here. This is a bug in the Arm Mali kernel driver that I reported in January 2022. The bug can be used to gain arbitrary kernel code execution from the untrusted app domain, which is then used to disable SELinux and gain root. The exploit is...
Exploit for Use After Free in Arm Avalon_Gpu_Kernel_Driver
Exploit for CVE-2022-46395 The write up can be found here...
Exploit for Improper Input Validation in Google Android
Exploit for CVE-2022-20186 The write up can be found here...
ASB-A-300090204
In convertToComponentName of DreamService.java, there is a possible way to launch arbitrary protected activities due to intent redirection. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...
ASB-A-279905816
In startInput of AudioPolicyInterfaceImpl.cpp, there is a possible way of erroneously displaying the microphone privacy indicator due to a race condition. This could lead to false user expectations. User interaction is needed for exploitation...
ASB-A-242704576
In canStartSystemGesture of RecentsAnimationDeviceState.java, there is a possible partial lockscreen bypass due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Exploit for Use After Free in Arm Bifrost_Gpu_Kernel_Driver
Exploit for CVE-2022-38181 for FireTV 2nd gen Cube This is a...
Exploit for Use After Free in Google Android
Bad Spin: Android Binder LPE Author: Moshe Kol Privilege esc...
Google Uncovers 18 Severe Security Vulnerabilities in Samsung Exynos Chips
Google is calling attention to a set of severe security flaws in Samsung's Exynos chips, some of which could be exploited remotely to completely compromise a phone without requiring any user interaction. The 18 zero-day vulnerabilities affect a wide range of Android smartphones from Samsung, Vivo...
Google's Android Red Team Had a Full Pixel 6 Pwn Before Launch
Before the flagship phone ever landed in users’ hands, the security team thoroughly hacked it by finding bugs and developing exploits...
ASB-A-231161832
In btifdmauthcmplevt of btifdm.cc, there is a possible vulnerability in Cross-Transport Key Derivation due to Weakness in Bluetooth Standard. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-213169612
In BitmapcreateFromParcel of Bitmap.cpp, there is a possible arbitrary code execution due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...
Exploit for Improper Input Validation in Google Android
DirtyPipe for Android Dirty Pipe CVE-2022-0847 temporary roo...