Re:No-permission Android App Gives Remote Shell
by jebblue on Tuesday December 20, 2011 @11:59PM
(#3376415)
What was that python reverse program and if that's running then the device is in debug mode (since it's an emulator maybe it's always in debug mode?). So I'm left wondering what does this prove?
[ Parent
| on HN ]
Re:No-permission Android App Gives Remote Shell
by _tornado_ on Wednesday December 21, 2011 @12:46AM
(#3376500)
The python program was simply the server the attacker sets up. It could be run on any machine connected to the Internet and then accessed by the shell program from the user's device. The emulator and server were run on the same machine to make it easier to record the screencast, but the method works just the same on a real device and a remote server. There is nothing really difficult about how it is done, it is explained in the linked presentation, it is just a nice demo of it.