cve-2015-1538-1

包含一个Python脚本，用于生成利用‘stsc’漏洞（即CVE-2015-1538（1））的MP4文件。这是我报告的Stagefright库中最关键的漏洞之一。此漏洞利用的预期结果是获得媒体用户权限的反向Shell。正如我在Black Hat和DEF CON演讲中详细所述，该用户还能访问相当多的组，例如inet、audio、camera和mediadrm。这些组允许攻击者远程拍照或收听麦克风，而无需利用其他漏洞。 此漏洞利用存在一些注意事项。首先，它并非通用漏洞利用，仅在一款设备型号上测试通过。我的目标是运行Android 4.0.4且仅实现部分ASLR的Galaxy...

scaredycat

SCAREDYCAT! versión 0.1 beta Script de Python para generar un archivo MP4 malicioso y lanzar un servidor web que aloja una página con el archivo 'video' incrustado en el puerto 8080. Esto explota otra vulnerabilidad de Stagefright, la vulnerabilidad de desbordamiento de enteros CVE-2015-3864,...

vulnerability-exploitation

vulnerability-exploitation Vulnerabilidad de root local - CVE-2019-13272 / Vulnerabilidad de omisión de seguridad – CVE-2019-14287/Google Android - Ejecución remota de código 'Stagefright' - CVE-2015-1538 Absolutamente, siempre elegí la vulnerabilidad de Linux, pero luego tuve que elegir una...

Android-vulnerability-exploitation

Explotación de vulnerabilidades de Android Google Android - 'Stagefright' Ejecución remota de código - CVE-2015-1538 Absolutamente, siempre elijo una vulnerabilidad de Linux, pero luego tuve que elegir una vulnerabilidad diferente porque no sabía que dos personas podían hacer lo mismo. Y luego, a...

cve-2015-1538-1

Se incluye un script de Python que genera un MP4 que explota la vulnerabilidad ‘stsc’, también conocida como CVE-2015-1538 1. Esta es una de las vulnerabilidades más críticas que reporté en la biblioteca Stagefright. El resultado esperado del exploit es una shell inversa como el usuario media. Co...

Metaphor

Metaphor Metaphor - 带有ASLR绕过功能的Stagefright 作者：来自NorthBit有限公司的Hanan Be'er 白皮书链接： https://raw.githubusercontent.com/NorthBit/Public/master/NorthBit-Metaphor.pdf Twitter： https://twitter.com/HighByte Metaphor的源代码现已发布！ 源代码包含一个PoC，可以实时生成MP4漏洞利用并绕过ASLR。 该PoC包含针对Nexus 5（搭载Android...

stagefright-cve-2015-3864

stagefright-cve-2015-3864 PoC - Parches binarios para CVE-2015-3864 NO para producción, úselo bajo su propio riesgo...

Exploiting-Stagefright-Vulnerability-CVE-2015-3864

Exploiting-Stagefright-Vulnerability-CVE-2015-3864 Stagefright refers to a set of software flaws in Android versions 2.2 "Froyo" through 5.1.1 "Lollipop," which affected 95% of all Android phones still. If the vulnerability is exploited, an attacker can use remote code execution and privilege...

cve-2015-1538-1

请不要与任何人分享此代码。该代码是在FrienNDA下提供给你的。违反此规定的人将不再被视为朋友。 随附的是一个Python脚本，用于生成利用“stsc”漏洞（即CVE-2015-1538 1）的MP4文件。这是我在Stagefright库中报告的最关键的漏洞之一。该漏洞的预期结果是获得媒体用户的反弹shell。正如我在Black Hat和DEF CON演讲中详细介绍的那样，该用户还具有对inet、audio、camera和mediadrm等多个组的访问权限。这些组允许攻击者远程拍照或监听麦克风，而无需利用其他漏洞。...

MiracleLinux 4 : firefox-38.2.0-4.0.1.AXS4 (AXSA:2015-442:07)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2015-442:07 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. With this update, following issues are...

Mozilla Firefox < 40.0

The version of Firefox installed on the remote Windows host is prior to 40.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2015-83 advisory. - crash in @ stagefright::SampleTable::isValid with h264 mp4CVE-2015-4480 CVE-2015-4480 - MPEG4 saio Chunk Integer Overfl...

Mozilla Firefox ESR < 38.2

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 38.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2015-83 advisory. - crash in @ stagefright::SampleTable::isValid with h264 mp4CVE-2015-4480 CVE-2015-4480 - MPEG4 saio Chunk...

Exploit-Android

Exploit-Android اختراق هواتف الاندرويد عبر انشاء ملف MP4 ملغم ا...

Exploit for Path Traversal in Thecartpress Thecartpress_Ecommerce_Shopping_Cart

This is a PoC exploit for CVE-2015-3301, a vulnerability in the Stagefright media library that allows for remote code execution on Android devices. The exploit, called Metaphor, is designed to bypass Address Space Layout Randomization ASLR and execute arbitrary code on the device. The exploit...

Linux Distros Unpatched Vulnerability : CVE-2016-3824

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - omx/OMXNodeInstance.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 does not...

Linux Distros Unpatched Vulnerability : CVE-2016-3880

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple buffer overflows in rtsp/ASessionDescription.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1,...

Linux Distros Unpatched Vulnerability : CVE-2016-6765

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. Th...

Linux Distros Unpatched Vulnerability : CVE-2016-6706

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An elevation of privilege vulnerability in libstagefright in Mediaserver in Android 7.0 before 2016-11-01 could enable a local malicious application to execute...

CVE-2024-34736

In setupVideoEncoder of StagefrightRecorder.cpp, there is a possible asynchronous playback when B-frame support is enabled. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

SUSE CVE-2015-4480

Integer overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via crafted MPEG-4 video data with H.264 encoding...