CVE-2024-0044 PoC — Google Android 安全漏洞

Source

https://github.com/Re13orn/CVE-2024-0044-EXP

Associated Vulnerability

Title:Google Android 安全漏洞 (CVE-2024-0044)
Description:In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Description

利用 CVE-2024-0044 Android 权限提升下载任意目标App沙箱文件。

Readme

# CVE-2024-0044-EXP
利用 CVE-2024-0044 Android 权限提升下载任意目标App沙箱文件。

**用法**
```
./CVE-2024-0044.sh <apk_path> <package_name>
```

**参数**
```
<apk_path>     任意一个本地 APK 文件的路径
<package_name> 目标应用包名
```

**示例**
```
./CVE-2024-0044.sh /path/to/target.apk com.target.mobile
```

## 说明
1. 适用目标设备为Android12/13，设备要开启开发者模式，并且已经通过ADB 连接。
2. 下载任意的APK，你可以使用：[F-DROID](https://f-droid.org/)。
3. 参考文章：[Bypassing the "run-as" debuggability check on Android via newline injection](https://rtx.meta.security/exploitation/2024/03/04/Android-run-as-forgery.html)

File Snapshot


 [4.0K]  /data/pocs/2e3aed3dfa63f4ad4cbc0c22509cb315e6563f94
├── [1.7K]  CVE-2024-0044.sh
└── [ 715]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!