Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

A Universal Way to Exploit Android PendingIntents in High-profile and System Apps

Black Hat via YouTube

Overview

Explore a comprehensive analysis of Android PendingIntents vulnerabilities in high-profile and system apps during this Black Hat conference talk. Delve into the intricacies of PendingIntent exploitation, covering topics such as retrieving and hijacking insecure PendingIntents, case studies of CVEs, and automated hunting techniques. Learn about security changes in Android 12 and receive essential guidelines for securing PendingIntents in app development. Gain valuable insights from experts Wenbo Chen, En He, and Daoyuan Wu as they uncover potential privilege escalation risks and provide practical advice for mitigating these vulnerabilities in Android applications.

Syllabus

Intro
Agenda
Who we are
The Pendingintent API
Previous Research
Retrieving Pendingintents
Hijacking Insecure Pendingintents
Deep Dive Into PendingIntent
Hijacking Pendingintents with Implicit Base Intent
Case Studies
POC of CVE-2020-0188
CVE-2020-0389: Notification
A-166126300: MediaBrowser Service
Some High Profile Apps: AppWidgets
CVE-2020-0294: System Service
Restrictions on URI Grant from uid 1000
Hunting Insecure Pendingintents Automatically
Search APIs without IMMUTABLE
Search Empty or Implicit base Intents
Security Changes in Android 12
Security Guidelines
Final Advice

Taught by

Black Hat

Reviews

Start your review of A Universal Way to Exploit Android PendingIntents in High-profile and System Apps

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.