CVE-2020-0014

This repository contains a proof-of-concept exploit for CVE-2020-0014, demonstrating how a malicious Android app can create a clickable Toast overlay to intercept user touch events and potentially steal sensitive information. The exploit modifies Toast window parameters to remove FLAG_NOT_TOUCHABLE, making it full-screen and clickable.

This PoC demonstrates CVE-2020-0014, a vulnerability in Android's Toast notification system that allows an overlay attack by manipulating Toast window parameters to create a clickable, full-screen overlay. The exploit uses reflection to modify Toast's internal fields, enabling touch event interception.