Janus-Exploit

KO | EN

gitlite — search

#hacktoberfest #react #ai #typescript #llm #machine-learning #docker #windows #awesome #vue #awesome-list #security #ios #mcp

(★ 49)

No description available.

Janus-Exploit 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Janus Vulnerability (CVE-2017-13156) Exploit with Proof-of-Concept(POC)

Android package installer does not check extra data before PKZIP, thus we can concat DEX & APK together with little bit of fix to pass the installation.

ART can run both APK and DEX, so here DEX ahead of base.apk is actually the one to execute.

extract the original classes.dex from apk
    use APKTOOL to do stuffs on it
    Inject the new dex into original APK
    update the installed app :)

Some automation has been added to the exploit to make it easier with the following checks.
   * Check if APK is signed with v1 signature scheme
   * Check if APK is supported to run on vulnerable android versions
   * Decide if APK is vulnerable based on above points and Android version it can be exploited on.
   * Wait for user to connect suggested vulnerable device and warn if recommended device is not connected
   * Fuse user provided dex into original apk and generate injected apk
   * Push an injected apk as an update to the original application
   * confirm if exploit was successful or abort with error.
    
All you have to do is pass dex file along with vulnerable original apk to the script and run the suitable android device.

You can extract raw classes.dex file from the apk using apktool **apktool -s d h5.apk** and modify the dex if you want and pass it to the script.

usage: kal-janus.py [-h] dex-file original-apk

I use classes.dex of other application and inject with the vulnerable application so that it breaks the vulnerable application.

![image](https://user-images.githubusercontent.com/52395887/112117751-aeb60900-8be1-11eb-9063-de5dd46dd0a3.png)

![image](https://user-images.githubusercontent.com/52395887/112118371-4ddb0080-8be2-11eb-9101-e3b6611cc1f0.png)

# Proof Of Concept (POC)

![janus-poc(1)](https://user-images.githubusercontent.com/52395887/112256331-a4e7e080-8c89-11eb-9dae-b962e93249a7.gif)

# NOTE

You can check the [writeup link](https://medium.com/mobis3c/exploiting-apps-vulnerable-to-janus-cve-2017-13156-8d52c983b4e0) to find the vulnerability and exploit it manually.

Janus-Exploit

Janus-Exploit 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Janus-Exploit

Janus-Exploit 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README