Giter VIP home page Giter VIP logo

cve-2020-0041's Introduction

CVE-2020-0041

This repository contains LPE code for exploiting CVE-2020-0041 implemented by bluefrostsecurity as released at https://github.com/bluefrostsecurity/CVE-2020-0041/tree/master/lpe . The exploitation approach for this part can be found at https://labs.bluefrostsecurity.de/blog/2020/04/08/cve-2020-0041-part-2-escalating-to-root/ .

This forked repository shall host ports for other kernels / devices in their specific branches. Big thanks to bluefrostsecurity for their awesome writeup and the exploit release.

cve-2020-0041's People

Contributors

j4nn avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar

cve-2020-0041's Issues

Required key not available

Hi, the exploit perfectly works on Pixel 3, I have a question about the following error when I try to create a new file:
image
Hi, the exploit perfectly works on Pixel 3, I have a question about the following error when I try to create a new file:
image

What is the issue? Is it related to some kernel enforcement?
Is it possible to bypass it? (Pixel 3 blueline)
Thank you in advance

Whats is that problem ?

Does someone know how to fix that error ?
Using android-ndk 19 dont see work here, what is wrong ?

Error2
Error1

LG V510N

Could you kindly find the offsets for the LG V510N with firmware
LMV510NAT-00-V20s-LAO-COM-MAR-23-2021+0 or earlier?

Thanks a lot
AndreaS

How do we define TASKS_OFFSET, PID_OFFSET...?

Hi! First, thanks for this repo :)
I'm trying to port it on another device (Pixel 4).
I used the x1x5-mroo as a starting point (since the Pixel 4 also uses the kernel 4.14).
I managed to find the offsets (selinux_enforcing...), but I'm having trouble in the get_task_by_pid function.
It's rebooting the phone.
I assume the values here must be wrong (TASKS_OFFSET...), but I don't know how they are defined.
Can you please help me with that?

cc @j4nn @bluefrostsecurity

Xperia xz2 compact freezes and reboots after random period after rooting

I've been trying to figure this out. The device freezes and reboots after a random period of time I'm not sure why. It may happen after 5 minutes or 30 seconds after rooting. It's also not related to magisk since the freeze and reboot can happen even without running magisk-start.

@j4nn Any idea how to debug this?

Having erro during compiling process.

Im trying compile using android-ndk-r20b, but 19 warnings appear saying some parts of the code are not correct, did i need install some package are missing ? is because some old projects i needed install libncurses5 for i can compile

Huawei P30 pro

is there any chance of getting the offsets for huawei P30 pro ?

Request

I tried the xz2 docomo 52.1.B.0.188 firmware and got the results, like this can you make it support? thanks

SO-04K:/data/local/tmp $ ./tama-mroot
WARNING: linker: Warning: "/data/local/tmp/tama-mroot" unused DT entry: unknown (type 0x50000000000 arg 0xcb00000000000) (ignoring)
WARNING: linker: Warning: "/data/local/tmp/tama-mroot" unused DT entry: unknown (type 0x60000000000 arg 0x5600000000000) (ignoring)
WARNING: linker: Warning: "/data/local/tmp/tama-mroot" unused DT entry: unknown (type 0xd0000000000 arg 0x2880000000000) (ignoring)
WARNING: linker: Warning: "/data/local/tmp/tama-mroot" unused DT entry: unknown (type 0xb0000000000 arg 0x180000000000) (ignoring)
WARNING: linker: Warning: "/data/local/tmp/tama-mroot" unused DT entry: unknown (type 0x150000000000 arg 0x0) (ignoring)
WARNING: linker: Warning: "/data/local/tmp/tama-mroot" unused DT entry: unknown (type 0x30000000000 arg 0x19db80000000000) (ignoring)
WARNING: linker: Warning: "/data/local/tmp/tama-mroot" unused DT entry: unknown (type 0x20000000000 arg 0x6000000000000) (ignoring)
WARNING: linker: Warning: "/data/local/tmp/tama-mroot" unused DT entry: unknown (type 0x140000000000 arg 0x70000000000) (ignoring)
WARNING: linker: Warning: "/data/local/tmp/tama-mroot" unused DT entry: unknown (type 0x170000000000 arg 0x11d00000000000) (ignoring)
WARNING: linker: Warning: "/data/local/tmp/tama-mroot" unused DT entry: unknown (type 0x70000000000 arg 0x10080000000000) (ignoring)
WARNING: linker: Warning: "/data/local/tmp/tama-mroot" unused DT entry: unknown (type 0x80000000000 arg 0x1c80000000000) (ignoring)
WARNING: linker: Warning: "/data/local/tmp/tama-mroot" unused DT entry: unknown (type 0x90000000000 arg 0x180000000000) (ignoring)
WARNING: linker: Warning: "/data/local/tmp/tama-mroot" unused DT entry: unknown (type 0x180000000000 arg 0x0) (ignoring)
WARNING: linker: Warning: "/data/local/tmp/tama-mroot" unused DT entry: unknown (type 0xfffffb0000000000 arg 0x1000000006f) (ignoring)
WARNING: linker: Warning: "/data/local/tmp/tama-mroot" unused DT entry: unknown (type 0xfffffe0000000000 arg 0xfd8000000006f) (ignoring)
WARNING: linker: Warning: "/data/local/tmp/tama-mroot" unused DT entry: unknown (type 0xffffff0000000000 arg 0x1000000006f) (ignoring)
WARNING: linker: Warning: "/data/local/tmp/tama-mroot" unused DT entry: unknown (type 0xfffff00000000000 arg 0xf38000000006f) (ignoring)
WARNING: linker: Warning: "/data/local/tmp/tama-mroot" unused DT entry: unknown (type 0xfffff90000000000 arg 0x12000000006f) (ignoring)
CANNOT LINK EXECUTABLE "./tama-mroot": empty/missing DT_HASH/DT_GNU_HASH in "/data/local/tmp/tama-mroot" (new hash type from the future?)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.