CVE-2024-0015 PoC — Google Android 安全漏洞

Source

https://github.com/UmVfX1BvaW50/CVE-2024-0015

Associated Vulnerability

Title:Google Android 安全漏洞 (CVE-2024-0015)
Description:In convertToComponentName of DreamService.java, there is a possible way to launch arbitrary protected activities due to intent redirection. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

Description

a demo poc for CVE-2024-0015

Readme

CVE-2024-0015 demo Poc & DubheCTF EXP

File Snapshot


 [4.0K]  /data/pocs/c11dd9ad98b7bfd488edb82a9337a6df4d6cc41d
├── [4.0K]  app
│   ├── [1.0K]  build.gradle
│   ├── [ 750]  proguard-rules.pro
│   └── [4.0K]  src
│       └── [4.0K]  main
│           ├── [1.5K]  AndroidManifest.xml
│           ├── [4.0K]  java
│           │   └── [4.0K]  com
│           │       └── [4.0K]  tsctf
│           │           └── [4.0K]  daydream
│           │               ├── [ 331]  MainActivity.java
│           │               └── [ 375]  MyService.java
│           └── [4.0K]  res
│               ├── [4.0K]  drawable
│               │   └── [5.5K]  ic_launcher_background.xml
│               ├── [4.0K]  drawable-v24
│               │   └── [1.7K]  ic_launcher_foreground.xml
│               ├── [4.0K]  layout
│               │   ├── [ 778]  activity_main.xml
│               │   └── [ 284]  dream.xml
│               ├── [4.0K]  mipmap-anydpi-v26
│               │   ├── [ 272]  ic_launcher_round.xml
│               │   └── [ 272]  ic_launcher.xml
│               ├── [4.0K]  mipmap-anydpi-v33
│               │   └── [ 343]  ic_launcher.xml
│               ├── [4.0K]  mipmap-hdpi
│               │   ├── [2.8K]  ic_launcher_round.webp
│               │   └── [1.4K]  ic_launcher.webp
│               ├── [4.0K]  mipmap-mdpi
│               │   ├── [1.7K]  ic_launcher_round.webp
│               │   └── [ 982]  ic_launcher.webp
│               ├── [4.0K]  mipmap-xhdpi
│               │   ├── [3.8K]  ic_launcher_round.webp
│               │   └── [1.9K]  ic_launcher.webp
│               ├── [4.0K]  mipmap-xxhdpi
│               │   ├── [5.8K]  ic_launcher_round.webp
│               │   └── [2.8K]  ic_launcher.webp
│               ├── [4.0K]  mipmap-xxxhdpi
│               │   ├── [7.6K]  ic_launcher_round.webp
│               │   └── [3.8K]  ic_launcher.webp
│               ├── [4.0K]  values
│               │   ├── [ 378]  colors.xml
│               │   ├── [  62]  refs.xml
│               │   ├── [  70]  strings.xml
│               │   └── [ 810]  themes.xml
│               ├── [4.0K]  values-night
│               │   └── [ 810]  themes.xml
│               └── [4.0K]  xml
│                   ├── [ 478]  backup_rules.xml
│                   ├── [ 551]  data_extraction_rules.xml
│                   └── [ 173]  test_dream_metadata.xml
├── [ 229]  build.gradle
├── [4.0K]  gradle
│   └── [4.0K]  wrapper
│       ├── [ 58K]  gradle-wrapper.jar
│       └── [ 230]  gradle-wrapper.properties
├── [1.2K]  gradle.properties
├── [5.6K]  gradlew
├── [2.6K]  gradlew.bat
├── [  38]  README.md
└── [ 325]  settings.gradle

23 directories, 38 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!