-
Notifications
You must be signed in to change notification settings - Fork 192
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Command Injection in Framework APK Input File #29
Comments
Well sure. In general you can do thay pretty much any place that takes
|
No worries. |
I'm not really planning on doing anything about this. It runs as root and is only accessible via the command line so you'd have to have a root level shell on a system in order to be running it. Thus the actual risk of the injection is negligible since you don't gain anything. |
Not a big deal, just if there was a malformed file name.
https://github.com/georgiaw/Smartphone-Pentest-Framework/blob/master/frameworkconsole/framework.py#L97
The text was updated successfully, but these errors were encountered: