Open jdup-web opened 2 years ago
Please note that the code and scripts were tested on S9, S10 and S21, not S8. As we show in our paper, S8 is not immediately vulnerable to the IV reuse attack.
The error you get means that the symbol km_get_ASN1_INTEGER
is not exported in libkeymaster_helper.so
. This function can be implemented directly to overcome the issue.
keybuster
assumes that several utility functions are exported in the shared library - this assumption holds for the latest S9, S10, S20, and S21 devices (as well as related variants).
Finally, please note that keybuster
requires sufficient privileges to read key blobs, and appropriate SELinux permissions to communicate with the TZOS drivers. Rooting the device can achieve those requirements (alternatively, one can use a development model if available, or exploit a privilege escalation vulnerability if applicable).
Tried in on a S7 with the same results. waiting now for my S9 to come in. btw i had root acces.
First of all, great job.,,, It would be a lot of trouble to implement km_get_ASN1_INTEGER or some example that I have no idea about??? at least we could use the old S8 device.
The S9 has a SW revision UP (bootfast), i can't downgrade ... :/
Hello, I'm trying to run the script on a Galaxy S8 (non rooted atm) and I've got this error :
I followed the steps bellow, did the chmod on the files but can't go past that..
I'm about to root it but I read in the document that root could be optional? I'll try again after rooting but I wanted to let know of that error