downgrade attack on s9+

shakevsky / keybuster

Apache License 2.0

112 stars 31 forks source link

downgrade attack on s9+ #4

Open Jonathon98 opened 2 years ago

Jonathon98 commented 2 years ago

star2lte:/data/local/tmp # ./poc_s10_secure_key_import.sh Attack log: /data/local/tmp/attack.log

Generating RSA wrapping key as v15 ekey blob... (wait for it) 24|star2lte:/data/local/tmp #

how to solve this issue? I am doing it on s9+. Thanks in advance

shakevsky commented 2 years ago

A good start would be to look at the log for hints. If the device is patched (e.g. patch level greater than November 2021) then the PoC will not work since Samsung fixed the issues after our responsible disclosure.