Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update webview_addjavascriptinterface.rb to work for android 4.4 and above. #8465

Closed
linuxdaddy opened this issue May 26, 2017 · 2 comments
Closed

Comments

@linuxdaddy
Copy link

We are in 2017 and nowadays everyone uses high versions of android.
This module works for android up to 4.2 , while everyone uses 4.4.4 or above.
It would be great if someone updates this exploit to work for higher versions of android, up to v6.
Regards!

@jeffmcjunkin
Copy link
Contributor

Umm, the flaw was patched with the new Android API version that came out with Android 4.2.

I really like exploit/windows/smb/ms08_067_netapi, but patched machines are patched against that exploit module. Similarly, Android versions starting at 4.2 are no longer vulnerable to webview_addjavascriptinterface, so there isn't a way to update the exploit module to suddenly start working again on newer Android releases.

@void-in
Copy link
Contributor

void-in commented Jun 20, 2017

The flaw was fixed in Android 4.2 as @jeffmcjunkin mentioned. This is not some kind of click and run exploit which can be ported to any android version. Therefore, what you are asking for isn't possible. I am doing to close this issue. Thanks.

@void-in void-in closed this as completed Jun 20, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants