CVE-2012-6636 PoC — Android API 安全漏洞

Source

https://github.com/xckevin/AndroidWebviewInjectDemo

Associated Vulnerability

Title:Android API 安全漏洞 (CVE-2012-6636)
Description:Android API是美国谷歌（Google）公司的一个用于Android系统中的应用程序编程接口，它包含了一些预先定义的函数，为应用程序和开发人员提供基于某软件或硬件访问一组例程的能力。 Android API 16.0及之前的版本中存在安全漏洞，该漏洞源于程序没有正确限制使用WebView.addJavascriptInterface方法。远程攻击者可通过使用Java Reflection API利用该漏洞执行任意Java对象的方法。

Description

An app demo for test android webview security issue: CVE-2012-6636

Readme

# AndroidWebviewInjectDemo
An app demo for test android webview security issue: CVE-2012-6636

File Snapshot


 [4.0K]  /data/pocs/df06fb596dc9b7c0449360dd3dbcf697fd9de7cf
├── [4.0K]  app
│   ├── [ 670]  build.gradle
│   ├── [ 751]  proguard-rules.pro
│   └── [4.0K]  src
│       └── [4.0K]  main
│           ├── [ 868]  AndroidManifest.xml
│           ├── [4.0K]  assets
│           │   └── [4.0K]  www
│           │       ├── [1.1K]  index.html
│           │       ├── [ 780]  index-read-sdcard.html
│           │       └── [ 525]  index-send-sms.html
│           ├── [4.0K]  java
│           │   └── [4.0K]  com
│           │       └── [4.0K]  alibaba
│           │           └── [4.0K]  android
│           │               └── [4.0K]  webviewinjectdemo
│           │                   └── [ 785]  MainActivity.java
│           └── [4.0K]  res
│               ├── [4.0K]  drawable
│               │   └── [5.5K]  ic_launcher_background.xml
│               ├── [4.0K]  drawable-v24
│               │   └── [1.8K]  ic_launcher_foreground.xml
│               ├── [4.0K]  layout
│               │   └── [ 413]  activity_main.xml
│               ├── [4.0K]  mipmap-anydpi-v26
│               │   ├── [ 272]  ic_launcher_round.xml
│               │   └── [ 272]  ic_launcher.xml
│               ├── [4.0K]  mipmap-hdpi
│               │   ├── [2.9K]  ic_launcher.png
│               │   └── [4.8K]  ic_launcher_round.png
│               ├── [4.0K]  mipmap-mdpi
│               │   ├── [2.0K]  ic_launcher.png
│               │   └── [2.7K]  ic_launcher_round.png
│               ├── [4.0K]  mipmap-xhdpi
│               │   ├── [4.4K]  ic_launcher.png
│               │   └── [6.7K]  ic_launcher_round.png
│               ├── [4.0K]  mipmap-xxhdpi
│               │   ├── [6.2K]  ic_launcher.png
│               │   └── [ 10K]  ic_launcher_round.png
│               ├── [4.0K]  mipmap-xxxhdpi
│               │   ├── [8.9K]  ic_launcher.png
│               │   └── [ 15K]  ic_launcher_round.png
│               └── [4.0K]  values
│                   ├── [ 208]  colors.xml
│                   ├── [  87]  strings.xml
│                   └── [ 383]  styles.xml
├── [ 558]  build.gradle
├── [4.0K]  gradle
│   └── [4.0K]  wrapper
│       ├── [ 53K]  gradle-wrapper.jar
│       └── [ 231]  gradle-wrapper.properties
├── [ 728]  gradle.properties
├── [5.2K]  gradlew
├── [2.1K]  gradlew.bat
├── [1.0K]  LICENSE
├── [  94]  README.md
└── [  15]  settings.gradle

23 directories, 34 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!