ComponentHijackingExploit

KO | EN

gitlite — search

#python #java #python3 #arduino #golang #machine-learning #rust #html #flask #javascript #seismology #nodejs

ComponentHijackingExploit

★ 14 Open GitHub ↗

Demo Exploits and Vulnerable APKs for my HitCon'14 topic

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

ComponentHijackingExploit
=========================

Intro
-------
Here are the demo exploits and vulnerable apks for my HitCon'14 presentation titled **"On the Feasibility of Automatically Generating Android Component Hijacking Exploits"**.
 - My PPT: http://www.slideshare.net/daoyuan0x/chv-exploit-hitcon-38299593
 - HitCon agenda: http://hitcon.org/2014/agenda/

Overview
--------
In this talk, we conduct an empirical study to explore the feasibility of automatically generating exploits for vetting component hijacking vulnerabilities in Android apps. Our study takes our hands-on exploit analysis for several real vulnerable apps as basis, and meanwhile reflects them to high-level analysis. Through this process, we identify several challenges that need to be addressed for a robust exploit generation technique, and some of them are first pinpointed. In particular, we believe one challenge is nearly impossible to be automatically tackled, if no domain knowledge is pre-provided. Overall, an automatic, accurate, and efficient solution for generating component hijacking exploits remains enough room to explore.

Exploits
--------
 - HackCleanMaster has two versions. You need to make a bit code change for moving to another version.
 - Facebook exploit can be found here: http://seclists.org/bugtraq/2013/Jan/27

Vulnerable APKs
---------------
GO SMS Pro has two versions: 4.35 and 5.23, but I missed the 5.23 apk. So I only include its Manifest and Jar files.

ComponentHijackingExploit

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README