CVE-2018-9468 PoC — Google Android 安全漏洞

Source

https://github.com/IOActive/AOSP-DownloadProviderHijacker

Associated Vulnerability

Title:Google Android 安全漏洞 (CVE-2018-9468)
Description:Google Android是美国谷歌（Google）公司的一套以Linux为基础的开源操作系统。 Google Android存在安全漏洞，该漏洞源于在查询DownloadManager.java时存在权限绕过问题，从而允许读取/写入任意文件，使得本地信息泄露和文件重写。

Description

PoC Exploiting Permission Bypass in Android's Download Provider (CVE-2018-9468)

Readme

# AOSP-DownloadProviderHijacker
PoC Exploiting Permission Bypass in Android's Download Provider (CVE-2018-9468)

## Security Advisory
https://ioactive.com/wp-content/uploads/2019/04/IOActive-Security-Advisory-Androids-Download-Provider-Permission-Bypass-CVE-2018-9468.pdf

## More Information
https://ioactive.com/multiple-vulnerabilities-in-androids-download-provider-cve-2018-9468-cve-2018-9493-cve-2018-9546/

File Snapshot


 [4.0K]  /data/pocs/11c57961453eb37e0822107172c64b1062c7080f
├── [4.0K]  app
│   ├── [ 934]  build.gradle
│   ├── [ 751]  proguard-rules.pro
│   └── [4.0K]  src
│       └── [4.0K]  main
│           ├── [ 930]  AndroidManifest.xml
│           ├── [4.0K]  assets
│           │   ├── [ 36K]  troll.gif
│           │   ├── [ 67K]  troll.jpg
│           │   ├── [ 55K]  troll.pdf
│           │   └── [ 37K]  troll.png
│           ├── [4.0K]  java
│           │   └── [4.0K]  com
│           │       └── [4.0K]  ioactive
│           │           └── [4.0K]  downloadHijacker
│           │               ├── [6.6K]  DownloadHijackerService.java
│           │               └── [8.9K]  MainActivity.java
│           └── [4.0K]  res
│               ├── [4.0K]  drawable
│               │   └── [5.5K]  ic_launcher_background.xml
│               ├── [4.0K]  drawable-v24
│               │   └── [1.8K]  ic_launcher_foreground.xml
│               ├── [4.0K]  layout
│               │   └── [5.2K]  activity_main.xml
│               ├── [4.0K]  mipmap-anydpi-v26
│               │   ├── [ 272]  ic_launcher_round.xml
│               │   └── [ 272]  ic_launcher.xml
│               ├── [4.0K]  mipmap-hdpi
│               │   ├── [3.0K]  ic_launcher.png
│               │   └── [4.9K]  ic_launcher_round.png
│               ├── [4.0K]  mipmap-mdpi
│               │   ├── [2.0K]  ic_launcher.png
│               │   └── [2.8K]  ic_launcher_round.png
│               ├── [4.0K]  mipmap-xhdpi
│               │   ├── [4.5K]  ic_launcher.png
│               │   └── [6.9K]  ic_launcher_round.png
│               ├── [4.0K]  mipmap-xxhdpi
│               │   ├── [6.3K]  ic_launcher.png
│               │   └── [ 10K]  ic_launcher_round.png
│               ├── [4.0K]  mipmap-xxxhdpi
│               │   ├── [9.0K]  ic_launcher.png
│               │   └── [ 15K]  ic_launcher_round.png
│               └── [4.0K]  values
│                   ├── [ 208]  colors.xml
│                   ├── [  87]  strings.xml
│                   └── [ 383]  styles.xml
├── [ 546]  build.gradle
├── [4.0K]  gradle
│   └── [4.0K]  wrapper
│       ├── [ 53K]  gradle-wrapper.jar
│       └── [ 233]  gradle-wrapper.properties
├── [ 726]  gradle.properties
├── [5.2K]  gradlew
├── [2.1K]  gradlew.bat
├── [ 34K]  LICENSE
├── [ 411]  README.md
└── [  15]  settings.gradle

21 directories, 36 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!