CVE-2015-3837 PoC — Android 输入验证漏洞

Source

Associated Vulnerability

Title:Android 输入验证漏洞 (CVE-2015-3837)
Description:The OpenSSLX509Certificate class in org/conscrypt/OpenSSLX509Certificate.java in Android before 5.1.1 LMY48I improperly includes certain context data during serialization and deserialization, which allows attackers to execute arbitrary code via an application that sends a crafted Intent, aka internal bug 21437603.

Description

Demo for CVE-2015-3837.

File Snapshot


 [4.0K]  /data/pocs/223c816ba611396a011c2e2c0c3df68e6005e0b4
├── [4.0K]  app
│   ├── [1.1K]  build.gradle
│   ├── [2.2K]  CMakeLists.txt
│   ├── [ 751]  proguard-rules.pro
│   └── [4.0K]  src
│       ├── [4.0K]  androidTest
│       │   └── [4.0K]  java
│       │       └── [4.0K]  com
│       │           └── [4.0K]  example
│       │               └── [4.0K]  toti
│       │                   └── [4.0K]  isildursbane
│       │                       └── [ 742]  ExampleInstrumentedTest.java
│       ├── [4.0K]  main
│       │   ├── [ 723]  AndroidManifest.xml
│       │   ├── [4.0K]  cpp
│       │   │   ├── [ 248]  native-crypto.cpp
│       │   │   └── [1.4K]  native-lib.cpp
│       │   ├── [4.0K]  java
│       │   │   └── [4.0K]  com
│       │   │       └── [4.0K]  example
│       │   │           └── [4.0K]  toti
│       │   │               ├── [4.0K]  isildursbane
│       │   │               │   └── [2.5K]  MainActivity.java
│       │   │               └── [4.0K]  myopenssl
│       │   │                   └── [ 541]  OpenSSLCertificate.java
│       │   └── [4.0K]  res
│       │       ├── [4.0K]  drawable
│       │       │   └── [5.5K]  ic_launcher_background.xml
│       │       ├── [4.0K]  drawable-v24
│       │       │   └── [1.8K]  ic_launcher_foreground.xml
│       │       ├── [4.0K]  layout
│       │       │   └── [3.5K]  activity_main.xml
│       │       ├── [4.0K]  mipmap-anydpi-v26
│       │       │   ├── [ 272]  ic_launcher_round.xml
│       │       │   └── [ 272]  ic_launcher.xml
│       │       ├── [4.0K]  mipmap-hdpi
│       │       │   ├── [3.0K]  ic_launcher.png
│       │       │   └── [4.9K]  ic_launcher_round.png
│       │       ├── [4.0K]  mipmap-mdpi
│       │       │   ├── [2.0K]  ic_launcher.png
│       │       │   └── [2.8K]  ic_launcher_round.png
│       │       ├── [4.0K]  mipmap-xhdpi
│       │       │   ├── [4.5K]  ic_launcher.png
│       │       │   └── [6.9K]  ic_launcher_round.png
│       │       ├── [4.0K]  mipmap-xxhdpi
│       │       │   ├── [6.3K]  ic_launcher.png
│       │       │   └── [ 10K]  ic_launcher_round.png
│       │       ├── [4.0K]  mipmap-xxxhdpi
│       │       │   ├── [9.0K]  ic_launcher.png
│       │       │   └── [ 15K]  ic_launcher_round.png
│       │       └── [4.0K]  values
│       │           ├── [ 208]  colors.xml
│       │           ├── [  75]  strings.xml
│       │           └── [ 383]  styles.xml
│       └── [4.0K]  test
│           └── [4.0K]  java
│               └── [4.0K]  com
│                   └── [4.0K]  example
│                       └── [4.0K]  toti
│                           └── [4.0K]  isildursbane
│                               └── [ 390]  ExampleUnitTest.java
├── [ 546]  build.gradle
├── [4.0K]  gradle
│   └── [4.0K]  wrapper
│       ├── [ 53K]  gradle-wrapper.jar
│       └── [ 231]  gradle-wrapper.properties
├── [ 726]  gradle.properties
├── [5.2K]  gradlew
├── [2.1K]  gradlew.bat
└── [  15]  settings.gradle

35 directories, 35 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!