search

B3nac / InjuredAndroid

A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.
Apache License 2.0
664 stars 144 forks source link

RCEActivity won't work w/ Android >= 10 (Q) #10

Closed BinaryKhaos closed 2 years ago

BinaryKhaos commented 3 years ago

Executing files in the App's home directory no longer works w/ Android >= 10 and is denied by SELinux. A workaround is to package the binaries into the native libs directory (w/ "android:extractNativeLibs=true" in the Manifest).

See: https://issuetracker.google.com/issues/128554619

B3nac commented 3 years ago

Thanks for letting me know! Interesting, shouldn't need too much of a modification to the exercise then. I think the binaries for the exercise are already in the /libs directory, so it looks like I only need to add android:extractNativeLibs=true to the manifest.