CVE-2017-13156

Related Files

Android Janus APK Signature Bypass

Posted Nov 7, 2019

Authored by h00die, timwr, V-E-O, GuardSquare | Site metasploit.com

This Metasploit module exploits CVE-2017-13156 in Android to install a payload into another application. The payload APK will have the same signature and can be installed as an update, preserving the existing data. The vulnerability was fixed in the 5th December 2017 security patch, and was additionally fixed by the APK Signature scheme v2, so only APKs signed with the v1 scheme are vulnerable. Payload handler is disabled, and a multi/handler must be started first.

tags | exploit

advisories | CVE-2017-13156

SHA-256 | 07dfdc4313d8080e07f5b2661f0494022dcf8b3a5afcb2da795fd921a4b33c84

Download | Favorite | View