Static Detection and Automatic Exploitation of Intent Message Vulnerabilities in Android
summary
A static analysis pipeline converts Android bytecode to GIMPLE, finds intent payload reads, tracks dataflow across methods with IFDS, extracts path constraints, and hands them to a string solver to produce concrete exploit strings; the tool implements automatic exploit generation and a static analyzer for ICC intents. Evaluated on 64 Play Store apps, 26 of 64 apps contain at least one vulnerable path, mostly UI injection vulnerabilities, and the system generates working exploits for feasible paths.
AI-written summary · about
chapters (15)
- 0:00Introduction
- 0:40Outline
- 1:27Android Components
- 3:46Previous Research
- 4:31Analysis
- 5:04Services
- 5:35Intent Message
- 5:51Attack Model
- 7:32UI Target
- 8:13Databases
- 9:31Remote Target Attacks
- 10:08Formal Analysis
- 11:05Static Analysis
- 13:53Validation
- 14:42Results
related talks
33mApp-etite for Destruction: a look into the cookbook of an attacker
01h 07mHow to attack (and secure) an Android app: an introduction
49mAll Your Code Belongs To Us (Dismantling Android Secrets With CodeInspect)
32mApp-etite for Destruction: a look into the cookbook of an attacker
07m"The significance of mobile exploit applications"
29mSecuring Android Applications - The not so se…
47mAttacking Android Applications
33mWhen Attackers Go Mobile-First with AI