CVE-2018-15835 PoC — Android 信息泄露漏洞

Source

https://github.com/Chirantar7004/Android-Passive-Location-Tracker

Associated Vulnerability

Title:Android 信息泄露漏洞 (CVE-2018-15835)
Description:Android是美国谷歌（Google）公司和开放手持设备联盟（简称OHA）共同开发的一套以Linux为基础的开源操作系统。 Android 1.0版本至9.0版本中存在安全漏洞。攻击者可利用该漏洞泄露敏感数据。

Description

Location tracking app without location permissions! Makes use of CVE-2018-15835 which makes use of Android OS information leakage.

Readme

# Android-Passive-Location-Tracker
Location tracking app without explicitly asking any location permissions! Makes use of CVE-2018-15835 which makes use of Android OS information leakage through broadcasting intents.

File Snapshot


 [4.0K]  /data/pocs/e691000f2827b219effc82d8c91d5267477b9e03
├── [4.0K]  Documentation
│   ├── [6.1K]  README.md
│   └── [208K]  Screenshot.png
├── [ 219]  README.md
└── [4.0K]  Tracker App
    ├── [4.0K]  app
    │   ├── [ 996]  build.gradle
    │   ├── [ 751]  proguard-rules.pro
    │   └── [4.0K]  src
    │       ├── [4.0K]  androidTest
    │       │   └── [4.0K]  java
    │       │       └── [4.0K]  com
    │       │           └── [4.0K]  example
    │       │               └── [4.0K]  chirantar
    │       │                   └── [4.0K]  meinefirstapp
    │       │                       └── [ 754]  ExampleInstrumentedTest.java
    │       ├── [4.0K]  main
    │       │   ├── [ 998]  AndroidManifest.xml
    │       │   ├── [4.0K]  java
    │       │   │   └── [4.0K]  com
    │       │   │       └── [4.0K]  example
    │       │   │           └── [4.0K]  chirantar
    │       │   │               └── [4.0K]  meinefirstapp
    │       │   │                   ├── [3.8K]  broadcast.java
    │       │   │                   └── [ 468]  MainActivity.java
    │       │   └── [4.0K]  res
    │       │       ├── [4.0K]  drawable
    │       │       │   └── [5.5K]  ic_launcher_background.xml
    │       │       ├── [4.0K]  drawable-v24
    │       │       │   └── [1.8K]  ic_launcher_foreground.xml
    │       │       ├── [4.0K]  layout
    │       │       │   └── [ 768]  activity_main.xml
    │       │       ├── [4.0K]  mipmap-anydpi-v26
    │       │       │   ├── [ 272]  ic_launcher_round.xml
    │       │       │   └── [ 272]  ic_launcher.xml
    │       │       ├── [4.0K]  mipmap-hdpi
    │       │       │   ├── [2.9K]  ic_launcher.png
    │       │       │   └── [4.8K]  ic_launcher_round.png
    │       │       ├── [4.0K]  mipmap-mdpi
    │       │       │   ├── [2.0K]  ic_launcher.png
    │       │       │   └── [2.7K]  ic_launcher_round.png
    │       │       ├── [4.0K]  mipmap-xhdpi
    │       │       │   ├── [4.4K]  ic_launcher.png
    │       │       │   └── [6.7K]  ic_launcher_round.png
    │       │       ├── [4.0K]  mipmap-xxhdpi
    │       │       │   ├── [6.2K]  ic_launcher.png
    │       │       │   └── [ 10K]  ic_launcher_round.png
    │       │       ├── [4.0K]  mipmap-xxxhdpi
    │       │       │   ├── [8.9K]  ic_launcher.png
    │       │       │   └── [ 15K]  ic_launcher_round.png
    │       │       └── [4.0K]  values
    │       │           ├── [ 208]  colors.xml
    │       │           ├── [  76]  strings.xml
    │       │           └── [ 383]  styles.xml
    │       └── [4.0K]  test
    │           └── [4.0K]  java
    │               └── [4.0K]  com
    │                   └── [4.0K]  example
    │                       └── [4.0K]  chirantar
    │                           └── [4.0K]  meinefirstapp
    │                               └── [ 396]  ExampleUnitTest.java
    ├── [ 546]  build.gradle
    ├── [4.0K]  gradle
    │   └── [4.0K]  wrapper
    │       ├── [ 53K]  gradle-wrapper.jar
    │       └── [ 200]  gradle-wrapper.properties
    ├── [ 728]  gradle.properties
    ├── [5.2K]  gradlew
    ├── [2.2K]  gradlew.bat
    ├── [  51]  README.md
    └── [  15]  settings.gradle

35 directories, 36 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!