Android OEM's applications (in)security and backdoors ... - QuarksLAB

More documents

Recommendations

Info

Android introduction Android security model Methodology Toward a backdoor without permission Post-exploitation Arbitrary HTTP requests execution Vuln2 - PCWClientS.apk PCWReceiver When an Intent is received with com.sec.pcw.device.HTTP_REQUEST_RETRY as action The body, uri and pushType attributed are extracted and an HTTP POST request is executed based on it PoC shell@android:/ $ am broadcast -a com.sec.pcw.device.HTTP_REQUEST_RETRY --es uri *URL* --es body *POST_DATA* --es pushType *PUSHTYPE*
Android introduction Android security model Methodology Toward a backdoor without permission Post-exploitation Arbitrary HTTP requests execution Objectives
Page 1 and 2: Android OEM’s applications (in)se
Page 3 and 4: Android introduction Android securi
Page 45: Android introduction Android securi
Page 96 and 97:
Android introduction Android securi
Page 98 and 99:
Page 100 and 101:
Page 102 and 103:
Page 104 and 105:
Page 106 and 107:
Page 108 and 109:
Page 110 and 111:
Page 112:
contact@quarkslab.com I @quarkslab.
show all

Android OEM's applications (in)security and backdoors ... - QuarksLAB

Create successful ePaper yourself

Delete template?

Save as template?