Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2016-3749 PoC — Android LockSettingsService java文件提权漏洞

Source
https://github.com/nirdev/CVE-2016-3749-PoC
Associated Vulnerability
Title:Android LockSettingsService java文件提权漏洞 (CVE-2016-3749)
Description:Android是美国谷歌（Google）公司和开放手持设备联盟（简称OHA）共同开发的一套以Linux为基础的开源操作系统。LockSettingsService是其中的一个屏幕锁定服务组件。 Android 6.0和6.0.1版本中的LockSettingsService组件中的server/LockSettingsService.java文件存在提权漏洞。攻击者可借助特制的应用程序利用该漏洞修改锁屏密码或图案。
File Snapshot

 [4.0K]  /data/pocs/49ad98c8228a59de54e08a27bc83646ee95dfa62
├── [4.0K]  app
│   ├── [ 656]  build.gradle
│   ├── [ 751]  proguard-rules.pro
│   └── [4.0K]  src
│       └── [4.0K]  main
│           ├── [ 912]  AndroidManifest.xml
│           ├── [4.0K]  java
│           │   └── [4.0K]  com
│           │       └── [4.0K]  technologies
│           │           └── [4.0K]  ate
│           │               └── [4.0K]  settinghack
│           │                   └── [2.6K]  MainActivity.java
│           └── [4.0K]  res
│               ├── [4.0K]  layout
│               │   └── [1.1K]  activity_main.xml
│               ├── [4.0K]  mipmap-hdpi
│               │   └── [3.0K]  ic_launcher.png
│               ├── [4.0K]  mipmap-mdpi
│               │   └── [2.0K]  ic_launcher.png
│               ├── [4.0K]  mipmap-xhdpi
│               │   └── [4.5K]  ic_launcher.png
│               ├── [4.0K]  mipmap-xxhdpi
│               │   └── [6.3K]  ic_launcher.png
│               ├── [4.0K]  mipmap-xxxhdpi
│               │   └── [9.0K]  ic_launcher.png
│               └── [4.0K]  values
│                   ├── [ 208]  colors.xml
│                   ├── [  74]  strings.xml
│                   └── [ 383]  styles.xml
├── [ 546]  build.gradle
├── [4.0K]  gradle
│   └── [4.0K]  wrapper
│       ├── [ 52K]  gradle-wrapper.jar
│       └── [ 230]  gradle-wrapper.properties
├── [ 730]  gradle.properties
├── [4.9K]  gradlew
├── [2.3K]  gradlew.bat
└── [  15]  settings.gradle

18 directories, 20 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.