CVE-2013-4710

This Metasploit module exploits a privilege escalation vulnerability in Android < 4.2's WebView component by injecting JavaScript that leverages the addJavascriptInterface method to execute arbitrary commands via Java Reflection APIs.

This repository contains a proof-of-concept exploit for CVE-2013-4710, demonstrating how JavaScript in a WebView can execute arbitrary commands on Android devices via reflection. The exploit leverages the `addJavascriptInterface` method to gain RCE by accessing the `Runtime` class.

This Metasploit module exploits a privilege escalation vulnerability in Android < 4.2's WebView component by leveraging the addJavascriptInterface method to execute arbitrary commands via Java Reflection APIs. It serves malicious JavaScript to vulnerable Android browsers or WebViews, leading to remote code execution.