CVE-2015-2231 概念验证
我用来演示 CVE-2015-2231 'Get Super Serial' 的 PoC。有几个人要求我把它发出来，以便他们可以在其他存在此漏洞、基于 ADUPS 固件的设备上使用类似的东西。趁它还没丢失，我正在清理笔记本电脑并发布这个。
这个应用程序只创建一个可点击的按钮，它会以 system 身份执行 sh /data/local/tmp/yay/shell.sh。在 "scripts-for-device" 目录中是我实际使用的脚本，但并非所有二进制文件都可用。你可以从 SuperSU 网站获取这些二进制文件。你还必须创建一个全局可读/可写的目录 /data/local/tmp/yay/，并将所需文件放入其中。
这仅仅是一个概念验证，并且包含 硬编码值，这些值很可能只适用于我当时测试的那款非常特定的 Blu 手机。在不了解情况并针对你的目的进行修改之前，请勿尝试在任何设备上运行此程序。否则，你很可能会让你的设备变砖。
The MIT License (MIT)
Copyright (c) 2015 Red Naga
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.